include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 120);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         define('COOKIE_LIFETIME_LONG', 86400*365);
   9
  10         $fetch_last_error = false;
  11         $fetch_last_error_code = false;
  12         $fetch_last_content_type = false;
  13         $fetch_curl_used = false;
  14
  15         mb_internal_encoding("UTF-8");
  16         date_default_timezone_set('UTC');
  17         if (defined('E_DEPRECATED')) {
  18                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  19         } else {
  20                 error_reporting(E_ALL & ~E_NOTICE);
  21         }
  22
  23         require_once 'config.php';
  24
  25         /**
  26          * Define a constant if not already defined
  27          *
  28          * @param string $name The constant name.
  29          * @param mixed $value The constant value.
  30          * @access public
  31          * @return boolean True if defined successfully or not.
  32          */
  33         function define_default($name, $value) {
  34                 defined($name) or define($name, $value);
  35         }
  36
  37         ///// Some defaults that you can override in config.php //////
  38
  39         define_default('FEED_FETCH_TIMEOUT', 45);
  40         // How may seconds to wait for response when requesting feed from a site
  41         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  42         // How may seconds to wait for response when requesting feed from a
  43         // site when that feed wasn't cached before
  44         define_default('FILE_FETCH_TIMEOUT', 45);
  45         // Default timeout when fetching files from remote sites
  46         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  47         // How many seconds to wait for initial response from website when
  48         // fetching files from remote sites
  49
  50         if (DB_TYPE == "pgsql") {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  52         } else {
  53                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  54         }
  55
  56         /**
  57          * Return available translations names.
  58          *
  59          * @access public
  60          * @return array A array of available translations.
  61          */
  62         function get_translations() {
  63                 $tr = array(
  64                                         "auto"  => "Detect automatically",
  65                                         "ca_CA" => "Català",
  66                                         "cs_CZ" => "Česky",
  67                                         "en_US" => "English",
  68                                         "es_ES" => "Español",
  69                                         "de_DE" => "Deutsch",
  70                                         "fr_FR" => "Français",
  71                                         "hu_HU" => "Magyar (Hungarian)",
  72                                         "it_IT" => "Italiano",
  73                                         "ja_JP" => "日本語 (Japanese)",
  74                                         "lv_LV" => "Latviešu",
  75                                         "nb_NO" => "Norwegian bokmål",
  76                                         "nl_NL" => "Dutch",
  77                                         "pl_PL" => "Polski",
  78                                         "ru_RU" => "Русский",
  79                                         "pt_BR" => "Portuguese/Brazil",
  80                                         "zh_CN" => "Simplified Chinese",
  81                                         "sv_SE" => "Svenska",
  82                                         "fi_FI" => "Suomi");
  83
  84                 return $tr;
  85         }
  86
  87         require_once "lib/accept-to-gettext.php";
  88         require_once "lib/gettext/gettext.inc";
  89
  90
  91         function startup_gettext() {
  92
  93                 # Get locale from Accept-Language header
  94                 $lang = al2gt(array_keys(get_translations()), "text/html");
  95
  96                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  97                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  98                 }
  99
 100                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
 101                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
 102
 103                         if ($pref_lang) {
 104                                 $lang = $pref_lang;
 105                         }
 106                 }
 107
 108                 if ($lang) {
 109                         if (defined('LC_MESSAGES')) {
 110                                 _setlocale(LC_MESSAGES, $lang);
 111                         } else if (defined('LC_ALL')) {
 112                                 _setlocale(LC_ALL, $lang);
 113                         }
 114
 115                         _bindtextdomain("messages", "locale");
 116
 117                         _textdomain("messages");
 118                         _bind_textdomain_codeset("messages", "UTF-8");
 119                 }
 120         }
 121
 122         require_once 'db-prefs.php';
 123         require_once 'version.php';
 124         require_once 'ccache.php';
 125         require_once 'labels.php';
 126
 127         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 128         ini_set('user_agent', SELF_USER_AGENT);
 129
 130         require_once 'lib/pubsubhubbub/publisher.php';
 131
 132         $schema_version = false;
 133
 134         /**
 135          * Print a timestamped debug message.
 136          *
 137          * @param string $msg The debug message.
 138          * @return void
 139          */
 140         function _debug($msg, $show = true) {
 141
 142                 $ts = strftime("%H:%M:%S", time());
 143                 if (function_exists('posix_getpid')) {
 144                         $ts = "$ts/" . posix_getpid();
 145                 }
 146
 147                 if ($show && !(defined('QUIET') && QUIET)) {
 148                         print "[$ts] $msg\n";
 149                 }
 150
 151                 if (defined('LOGFILE'))  {
 152                         $fp = fopen(LOGFILE, 'a+');
 153
 154                         if ($fp) {
 155                                 fputs($fp, "[$ts] $msg\n");
 156                                 fclose($fp);
 157                         }
 158                 }
 159
 160         } // function _debug
 161
 162         /**
 163          * Purge a feed old posts.
 164          *
 165          * @param mixed $link A database connection.
 166          * @param mixed $feed_id The id of the purged feed.
 167          * @param mixed $purge_interval Olderness of purged posts.
 168          * @param boolean $debug Set to True to enable the debug. False by default.
 169          * @access public
 170          * @return void
 171          */
 172         function purge_feed($feed_id, $purge_interval, $debug = false) {
 173
 174                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 175
 176                 $rows = -1;
 177
 178                 $result = db_query(
 179                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 180
 181                 $owner_uid = false;
 182
 183                 if (db_num_rows($result) == 1) {
 184                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 185                 }
 186
 187                 if ($purge_interval == -1 || !$purge_interval) {
 188                         if ($owner_uid) {
 189                                 ccache_update($feed_id, $owner_uid);
 190                         }
 191                         return;
 192                 }
 193
 194                 if (!$owner_uid) return;
 195
 196                 if (FORCE_ARTICLE_PURGE == 0) {
 197                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 198                                 $owner_uid, false);
 199                 } else {
 200                         $purge_unread = true;
 201                         $purge_interval = FORCE_ARTICLE_PURGE;
 202                 }
 203
 204                 if (!$purge_unread) $query_limit = " unread = false AND ";
 205
 206                 if (DB_TYPE == "pgsql") {
 207                         $pg_version = get_pgsql_version();
 208
 209                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 210
 211                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 212                                         ttrss_entries.id = ref_id AND
 213                                         marked = false AND
 214                                         feed_id = '$feed_id' AND
 215                                         $query_limit
 216                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 217
 218                         } else {
 219
 220                                 $result = db_query("DELETE FROM ttrss_user_entries
 221                                         USING ttrss_entries
 222                                         WHERE ttrss_entries.id = ref_id AND
 223                                         marked = false AND
 224                                         feed_id = '$feed_id' AND
 225                                         $query_limit
 226                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 227                         }
 228
 229                 } else {
 230
 231 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 232                                 marked = false AND feed_id = '$feed_id' AND
 233                                 (SELECT date_updated FROM ttrss_entries WHERE
 234                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 235
 236                         $result = db_query("DELETE FROM ttrss_user_entries
 237                                 USING ttrss_user_entries, ttrss_entries
 238                                 WHERE ttrss_entries.id = ref_id AND
 239                                 marked = false AND
 240                                 feed_id = '$feed_id' AND
 241                                 $query_limit
 242                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 243                 }
 244
 245                 $rows = db_affected_rows($result);
 246
 247                 ccache_update($feed_id, $owner_uid);
 248
 249                 if ($debug) {
 250                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 251                 }
 252
 253                 return $rows;
 254         } // function purge_feed
 255
 256         function feed_purge_interval($feed_id) {
 257
 258                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 259                         WHERE id = '$feed_id'");
 260
 261                 if (db_num_rows($result) == 1) {
 262                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 263                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 264
 265                         if ($purge_interval == 0) $purge_interval = get_pref(
 266                                 'PURGE_OLD_DAYS', $owner_uid);
 267
 268                         return $purge_interval;
 269
 270                 } else {
 271                         return -1;
 272                 }
 273         }
 274
 275         function purge_orphans($do_output = false) {
 276
 277                 // purge orphaned posts in main content table
 278                 $result = db_query("DELETE FROM ttrss_entries WHERE
 279                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 280
 281                 if ($do_output) {
 282                         $rows = db_affected_rows($result);
 283                         _debug("Purged $rows orphaned posts.");
 284                 }
 285         }
 286
 287         function get_feed_update_interval($feed_id) {
 288                 $result = db_query("SELECT owner_uid, update_interval FROM
 289                         ttrss_feeds WHERE id = '$feed_id'");
 290
 291                 if (db_num_rows($result) == 1) {
 292                         $update_interval = db_fetch_result($result, 0, "update_interval");
 293                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 294
 295                         if ($update_interval != 0) {
 296                                 return $update_interval;
 297                         } else {
 298                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 299                         }
 300
 301                 } else {
 302                         return -1;
 303                 }
 304         }
 305
 306         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 307
 308                 global $fetch_last_error;
 309                 global $fetch_last_error_code;
 310                 global $fetch_last_content_type;
 311                 global $fetch_curl_used;
 312
 313                 $url = str_replace(' ', '%20', $url);
 314
 315                 if (!defined('NO_CURL') && function_exists('curl_init')) {
 316
 317                         $fetch_curl_used = true;
 318
 319                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 320                                 $new_url = geturl($url);
 321                                 if (!$new_url) {
 322                                     // geturl has already populated $fetch_last_error
 323                                     return false;
 324                                 }
 325                                 $ch = curl_init($new_url);
 326                         } else {
 327                                 $ch = curl_init($url);
 328                         }
 329
 330                         if ($timestamp && !$post_query) {
 331                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 332                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 333                         }
 334
 335                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 336                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 337                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 338                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 339                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 340                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 341                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 342                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 343                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 344                         curl_setopt($ch, CURLOPT_ENCODING, "");
 345                         curl_setopt($ch, CURLOPT_REFERER, $url);
 346
 347                         if ($post_query) {
 348                                 curl_setopt($ch, CURLOPT_POST, true);
 349                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 350                         }
 351
 352                         if ($login && $pass)
 353                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 354
 355                         $contents = @curl_exec($ch);
 356
 357                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 358                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 359                                 $contents = @curl_exec($ch);
 360                         }
 361
 362                         if ($contents === false) {
 363                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 364                                 curl_close($ch);
 365                                 return false;
 366                         }
 367
 368                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 369                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 370
 371                         $fetch_last_error_code = $http_code;
 372
 373                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 374                                 if (curl_errno($ch) != 0) {
 375                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 376                                 } else {
 377                                         $fetch_last_error = "HTTP Code: $http_code";
 378                                 }
 379                                 curl_close($ch);
 380                                 return false;
 381                         }
 382
 383                         curl_close($ch);
 384
 385                         return $contents;
 386                 } else {
 387
 388                         $fetch_curl_used = false;
 389
 390                         if ($login && $pass){
 391                                 $url_parts = array();
 392
 393                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 394
 395                                 $pass = urlencode($pass);
 396
 397                                 if ($url_parts[1] && $url_parts[2]) {
 398                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 399                                 }
 400                         }
 401
 402                         if (!$post_query && $timestamp) {
 403                                 $context = stream_context_create(array(
 404                                         'http' => array(
 405                                                 'method' => 'GET',
 406                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
 407                                         )));
 408                         } else {
 409                                 $context = NULL;
 410                         }
 411
 412                         $old_error = error_get_last();
 413
 414                         $data = @file_get_contents($url, false, $context);
 415
 416                         $fetch_last_content_type = false;  // reset if no type was sent from server
 417                         if (isset($http_response_header) && is_array($http_response_header)) {
 418                                 foreach ($http_response_header as $h) {
 419                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
 420                                                 $fetch_last_content_type = substr($h, 14);
 421                                                 // don't abort here b/c there might be more than one
 422                                                 // e.g. if we were being redirected -- last one is the right one
 423                                         }
 424
 425                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
 426                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
 427                                         }
 428                                 }
 429                         }
 430
 431                         if (!$data) {
 432                                 $error = error_get_last();
 433
 434                                 if ($error['message'] != $old_error['message']) {
 435                                         $fetch_last_error = $error["message"];
 436                                 } else {
 437                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
 438                                 }
 439                         }
 440                         return $data;
 441                 }
 442
 443         }
 444
 445         /**
 446          * Try to determine the favicon URL for a feed.
 447          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 448          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 449          *
 450          * @param string $url A feed or page URL
 451          * @access public
 452          * @return mixed The favicon URL, or false if none was found.
 453          */
 454         function get_favicon_url($url) {
 455
 456                 $favicon_url = false;
 457
 458                 if ($html = @fetch_file_contents($url)) {
 459
 460                         libxml_use_internal_errors(true);
 461
 462                         $doc = new DOMDocument();
 463                         $doc->loadHTML($html);
 464                         $xpath = new DOMXPath($doc);
 465
 466                         $base = $xpath->query('/html/head/base');
 467                         foreach ($base as $b) {
 468                                 $url = $b->getAttribute("href");
 469                                 break;
 470                         }
 471
 472                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 473                         if (count($entries) > 0) {
 474                                 foreach ($entries as $entry) {
 475                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 476                                         break;
 477                                 }
 478                         }
 479                 }
 480
 481                 if (!$favicon_url)
 482                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 483
 484                 return $favicon_url;
 485         } // function get_favicon_url
 486
 487         function check_feed_favicon($site_url, $feed) {
 488 #               print "FAVICON [$site_url]: $favicon_url\n";
 489
 490                 $icon_file = ICONS_DIR . "/$feed.ico";
 491
 492                 if (!file_exists($icon_file)) {
 493                         $favicon_url = get_favicon_url($site_url);
 494
 495                         if ($favicon_url) {
 496                                 // Limiting to "image" type misses those served with text/plain
 497                                 $contents = fetch_file_contents($favicon_url); // , "image");
 498
 499                                 if ($contents) {
 500                                         // Crude image type matching.
 501                                         // Patterns gleaned from the file(1) source code.
 502                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 503                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 504                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 505                                         }
 506                                         elseif (preg_match('/^GIF8/', $contents)) {
 507                                                 // 0       string          GIF8            GIF image data
 508                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 509                                         }
 510                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 511                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 512                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 513                                         }
 514                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 515                                                 // 0       beshort         0xffd8          JPEG image data
 516                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 517                                         }
 518                                         else {
 519                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 520                                                 $contents = "";
 521                                         }
 522                                 }
 523
 524                                 if ($contents) {
 525                                         $fp = @fopen($icon_file, "w");
 526
 527                                         if ($fp) {
 528                                                 fwrite($fp, $contents);
 529                                                 fclose($fp);
 530                                                 chmod($icon_file, 0644);
 531                                         }
 532                                 }
 533                         }
 534             return $icon_file;
 535                 }
 536         }
 537
 538         function print_select($id, $default, $values, $attributes = "") {
 539                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 540                 foreach ($values as $v) {
 541                         if ($v == $default)
 542                                 $sel = "selected=\"1\"";
 543                          else
 544                                 $sel = "";
 545
 546                         $v = trim($v);
 547
 548                         print "<option value=\"$v\" $sel>$v</option>";
 549                 }
 550                 print "</select>";
 551         }
 552
 553         function print_select_hash($id, $default, $values, $attributes = "") {
 554                 print "<select name=\"$id\" id='$id' $attributes>";
 555                 foreach (array_keys($values) as $v) {
 556                         if ($v == $default)
 557                                 $sel = 'selected="selected"';
 558                          else
 559                                 $sel = "";
 560
 561                         $v = trim($v);
 562
 563                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 564                 }
 565
 566                 print "</select>";
 567         }
 568
 569         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 570                 foreach ($values as $v) {
 571
 572                         if ($v == $default)
 573                                 $sel = "checked";
 574                          else
 575                                 $sel = "";
 576
 577                         if ($v == $true_is) {
 578                                 $sel .= " value=\"1\"";
 579                         } else {
 580                                 $sel .= " value=\"0\"";
 581                         }
 582
 583                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 584                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 585
 586                 }
 587         }
 588
 589         function initialize_user_prefs($uid, $profile = false) {
 590
 591                 $uid = db_escape_string($uid);
 592
 593                 if (!$profile) {
 594                         $profile = "NULL";
 595                         $profile_qpart = "AND profile IS NULL";
 596                 } else {
 597                         $profile_qpart = "AND profile = '$profile'";
 598                 }
 599
 600                 if (get_schema_version() < 63) $profile_qpart = "";
 601
 602                 db_query("BEGIN");
 603
 604                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 605
 606                 $u_result = db_query("SELECT pref_name
 607                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 608
 609                 $active_prefs = array();
 610
 611                 while ($line = db_fetch_assoc($u_result)) {
 612                         array_push($active_prefs, $line["pref_name"]);
 613                 }
 614
 615                 while ($line = db_fetch_assoc($result)) {
 616                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 617 //                              print "adding " . $line["pref_name"] . "<br>";
 618
 619                                 $line["def_value"] = db_escape_string($line["def_value"]);
 620                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 621
 622                                 if (get_schema_version() < 63) {
 623                                         db_query("INSERT INTO ttrss_user_prefs
 624                                                 (owner_uid,pref_name,value) VALUES
 625                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 626
 627                                 } else {
 628                                         db_query("INSERT INTO ttrss_user_prefs
 629                                                 (owner_uid,pref_name,value, profile) VALUES
 630                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 631                                 }
 632
 633                         }
 634                 }
 635
 636                 db_query("COMMIT");
 637
 638         }
 639
 640         function get_ssl_certificate_id() {
 641                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 642                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 643                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 644                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 645                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 646                 }
 647                 return "";
 648         }
 649
 650         function authenticate_user($login, $password, $check_only = false) {
 651
 652                 if (!SINGLE_USER_MODE) {
 653                         $user_id = false;
 654
 655                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
 656
 657                                 $user_id = (int) $plugin->authenticate($login, $password);
 658
 659                                 if ($user_id) {
 660                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 661                                         break;
 662                                 }
 663                         }
 664
 665                         if ($user_id && !$check_only) {
 666                                 @session_start();
 667
 668                                 $_SESSION["uid"] = $user_id;
 669                                 $_SESSION["version"] = VERSION_STATIC;
 670
 671                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 672                                         WHERE id = '$user_id'");
 673
 674                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 675                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 676                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 677
 678                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 679                                         $_SESSION["uid"]);
 680
 681                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 682                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 683                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 684
 685                                 $_SESSION["last_version_check"] = time();
 686
 687                                 initialize_user_prefs($_SESSION["uid"]);
 688
 689                                 return true;
 690                         }
 691
 692                         return false;
 693
 694                 } else {
 695
 696                         $_SESSION["uid"] = 1;
 697                         $_SESSION["name"] = "admin";
 698                         $_SESSION["access_level"] = 10;
 699
 700                         $_SESSION["hide_hello"] = true;
 701                         $_SESSION["hide_logout"] = true;
 702
 703                         $_SESSION["auth_module"] = false;
 704
 705                         if (!$_SESSION["csrf_token"]) {
 706                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 707                         }
 708
 709                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 710
 711                         initialize_user_prefs($_SESSION["uid"]);
 712
 713                         return true;
 714                 }
 715         }
 716
 717         function make_password($length = 8) {
 718
 719                 $password = "";
 720                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 721
 722         $i = 0;
 723
 724                 while ($i < $length) {
 725                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 726
 727                         if (!strstr($password, $char)) {
 728                                 $password .= $char;
 729                                 $i++;
 730                         }
 731                 }
 732                 return $password;
 733         }
 734
 735         // this is called after user is created to initialize default feeds, labels
 736         // or whatever else
 737
 738         // user preferences are checked on every login, not here
 739
 740         function initialize_user($uid) {
 741
 742                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 743                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 744                         'http://tt-rss.org/releases.rss')");
 745
 746                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 747                         values ('$uid', 'Tiny Tiny RSS: Forum',
 748                                 'http://tt-rss.org/forum/rss.php')");
 749         }
 750
 751         function logout_user() {
 752                 session_destroy();
 753                 if (isset($_COOKIE[session_name()])) {
 754                    setcookie(session_name(), '', time()-42000, '/');
 755                 }
 756         }
 757
 758         function validate_csrf($csrf_token) {
 759                 return $csrf_token == $_SESSION['csrf_token'];
 760         }
 761
 762         function load_user_plugins($owner_uid) {
 763                 if ($owner_uid) {
 764                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 765
 766                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
 767
 768                         if (get_schema_version() > 100) {
 769                                 PluginHost::getInstance()->load_data();
 770                         }
 771                 }
 772         }
 773
 774         function login_sequence() {
 775                 if (SINGLE_USER_MODE) {
 776                         @session_start();
 777                         authenticate_user("admin", null);
 778                         load_user_plugins($_SESSION["uid"]);
 779                 } else {
 780                         if (!validate_session()) $_SESSION["uid"] = false;
 781
 782                         if (!$_SESSION["uid"]) {
 783
 784                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 785                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 786                                 } else {
 787                                          authenticate_user(null, null, true);
 788                                 }
 789
 790                                 if (!$_SESSION["uid"]) {
 791                                         @session_destroy();
 792                                         setcookie(session_name(), '', time()-42000, '/');
 793
 794                                         render_login_form();
 795                                         exit;
 796                                 }
 797
 798                         } else {
 799                                 /* bump login timestamp */
 800                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 801                                         $_SESSION["uid"]);
 802                                 $_SESSION["last_login_update"] = time();
 803                         }
 804
 805                         if ($_SESSION["uid"]) {
 806                                 startup_gettext();
 807                                 load_user_plugins($_SESSION["uid"]);
 808
 809                                 /* cleanup ccache */
 810
 811                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 812                                         $_SESSION["uid"] . " AND
 813                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 814                                                         ttrss_feeds.id = feed_id) = 0");
 815
 816                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 817                                         $_SESSION["uid"] . " AND
 818                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 819                                                         ttrss_feed_categories.id = feed_id) = 0");
 820
 821                         }
 822
 823                 }
 824         }
 825
 826         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 827                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 828                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 829                 } else {
 830                         return $str;
 831                 }
 832         }
 833
 834         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 835
 836                 try {
 837                         $source_tz = new DateTimeZone($source_tz);
 838                 } catch (Exception $e) {
 839                         $source_tz = new DateTimeZone('UTC');
 840                 }
 841
 842                 try {
 843                         $dest_tz = new DateTimeZone($dest_tz);
 844                 } catch (Exception $e) {
 845                         $dest_tz = new DateTimeZone('UTC');
 846                 }
 847
 848                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 849                 return $dt->format('U') + $dest_tz->getOffset($dt);
 850         }
 851
 852         function make_local_datetime($timestamp, $long, $owner_uid = false,
 853                                         $no_smart_dt = false) {
 854
 855                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 856                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 857
 858                 global $utc_tz;
 859                 global $user_tz;
 860
 861                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
 862
 863                 $timestamp = substr($timestamp, 0, 19);
 864
 865                 # We store date in UTC internally
 866                 $dt = new DateTime($timestamp, $utc_tz);
 867
 868                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 869
 870                 if ($user_tz_string != 'Automatic') {
 871
 872                         try {
 873                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
 874                         } catch (Exception $e) {
 875                                 $user_tz = $utc_tz;
 876                         }
 877
 878                         $tz_offset = $user_tz->getOffset($dt);
 879                 } else {
 880                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
 881                 }
 882
 883                 $user_timestamp = $dt->format('U') + $tz_offset;
 884
 885                 if (!$no_smart_dt) {
 886                         return smart_date_time($user_timestamp,
 887                                 $tz_offset, $owner_uid);
 888                 } else {
 889                         if ($long)
 890                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 891                         else
 892                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 893
 894                         return date($format, $user_timestamp);
 895                 }
 896         }
 897
 898         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 899                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 900
 901                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 902                         return date("G:i", $timestamp);
 903                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 904                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 905                         return date($format, $timestamp);
 906                 } else {
 907                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 908                         return date($format, $timestamp);
 909                 }
 910         }
 911
 912         function sql_bool_to_bool($s) {
 913                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 914                         return true;
 915                 } else {
 916                         return false;
 917                 }
 918         }
 919
 920         function bool_to_sql_bool($s) {
 921                 if ($s) {
 922                         return "true";
 923                 } else {
 924                         return "false";
 925                 }
 926         }
 927
 928         // Session caching removed due to causing wrong redirects to upgrade
 929         // script when get_schema_version() is called on an obsolete session
 930         // created on a previous schema version.
 931         function get_schema_version($nocache = false) {
 932                 global $schema_version;
 933
 934                 if (!$schema_version && !$nocache) {
 935                         $result = db_query("SELECT schema_version FROM ttrss_version");
 936                         $version = db_fetch_result($result, 0, "schema_version");
 937                         $schema_version = $version;
 938                         return $version;
 939                 } else {
 940                         return $schema_version;
 941                 }
 942         }
 943
 944         function sanity_check() {
 945                 require_once 'errors.php';
 946
 947                 $error_code = 0;
 948                 $schema_version = get_schema_version(true);
 949
 950                 if ($schema_version != SCHEMA_VERSION) {
 951                         $error_code = 5;
 952                 }
 953
 954                 if (DB_TYPE == "mysql") {
 955                         $result = db_query("SELECT true", false);
 956                         if (db_num_rows($result) != 1) {
 957                                 $error_code = 10;
 958                         }
 959                 }
 960
 961                 if (db_escape_string("testTEST") != "testTEST") {
 962                         $error_code = 12;
 963                 }
 964
 965                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 966         }
 967
 968         function file_is_locked($filename) {
 969                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
 970                         if (function_exists('flock')) {
 971                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 972                                 if ($fp) {
 973                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
 974                                                 flock($fp, LOCK_UN);
 975                                                 fclose($fp);
 976                                                 return false;
 977                                         }
 978                                         fclose($fp);
 979                                         return true;
 980                                 } else {
 981                                         return false;
 982                                 }
 983                         }
 984                         return true; // consider the file always locked and skip the test
 985                 } else {
 986                         return false;
 987                 }
 988         }
 989
 990
 991         function make_lockfile($filename) {
 992                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 993
 994                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 995                         if (function_exists('posix_getpid')) {
 996                                 fwrite($fp, posix_getpid() . "\n");
 997                         }
 998                         return $fp;
 999                 } else {
1000                         return false;
1001                 }
1002         }
1003
1004         function make_stampfile($filename) {
1005                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1006
1007                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1008                         fwrite($fp, time() . "\n");
1009                         flock($fp, LOCK_UN);
1010                         fclose($fp);
1011                         return true;
1012                 } else {
1013                         return false;
1014                 }
1015         }
1016
1017         function sql_random_function() {
1018                 if (DB_TYPE == "mysql") {
1019                         return "RAND()";
1020                 } else {
1021                         return "RANDOM()";
1022                 }
1023         }
1024
1025         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1026
1027                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1028
1029                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1030
1031                         // Todo: all this interval stuff needs some generic generator function
1032
1033                         $date_qpart = "false";
1034
1035                         switch ($mode) {
1036                         case "1day":
1037                                 if (DB_TYPE == "pgsql") {
1038                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1039                                 } else {
1040                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1041                                 }
1042                                 break;
1043                         case "1week":
1044                                 if (DB_TYPE == "pgsql") {
1045                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1046                                 } else {
1047                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1048                                 }
1049                                 break;
1050                         case "2weeks":
1051                                 if (DB_TYPE == "pgsql") {
1052                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1053                                 } else {
1054                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1055                                 }
1056                                 break;
1057                         default:
1058                                 $date_qpart = "true";
1059                         }
1060
1061                         if (is_numeric($feed)) {
1062                                 if ($cat_view) {
1063
1064                                         if ($feed >= 0) {
1065
1066                                                 if ($feed > 0) {
1067                                                         $children = getChildCategories($feed, $owner_uid);
1068                                                         array_push($children, $feed);
1069
1070                                                         $children = join(",", $children);
1071
1072                                                         $cat_qpart = "cat_id IN ($children)";
1073                                                 } else {
1074                                                         $cat_qpart = "cat_id IS NULL";
1075                                                 }
1076
1077                                                 db_query("UPDATE ttrss_user_entries
1078                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1079                                                                 (SELECT id FROM
1080                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1081                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1082                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1083
1084                                         } else if ($feed == -2) {
1085
1086                                                 db_query("UPDATE ttrss_user_entries
1087                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1088                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1089                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1090                                         }
1091
1092                                 } else if ($feed > 0) {
1093
1094                                         db_query("UPDATE ttrss_user_entries
1095                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1096                                                         (SELECT id FROM
1097                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1098                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1099
1100                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1101
1102                                         if ($feed == -1) {
1103                                                 db_query("UPDATE ttrss_user_entries
1104                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1105                                                                 (SELECT id FROM
1106                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1107                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1108                                         }
1109
1110                                         if ($feed == -2) {
1111                                                 db_query("UPDATE ttrss_user_entries
1112                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1113                                                                 (SELECT id FROM
1114                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1115                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1116                                         }
1117
1118                                         if ($feed == -3) {
1119
1120                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1121
1122                                                 if (DB_TYPE == "pgsql") {
1123                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1124                                                 } else {
1125                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1126                                                                 INTERVAL $intl HOUR) ";
1127                                                 }
1128
1129                                                 db_query("UPDATE ttrss_user_entries
1130                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1131                                                                 (SELECT id FROM
1132                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1133                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1134                                         }
1135
1136                                         if ($feed == -4) {
1137                                                 db_query("UPDATE ttrss_user_entries
1138                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1139                                                                 (SELECT id FROM
1140                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1141                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1142                                         }
1143
1144                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1145
1146                                         $label_id = feed_to_label_id($feed);
1147
1148                                         db_query("UPDATE ttrss_user_entries
1149                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1150                                                         (SELECT id FROM
1151                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1152                                                                         AND label_id = '$label_id' AND ref_id = article_id
1153                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1154
1155                                 }
1156
1157                                 ccache_update($feed, $owner_uid, $cat_view);
1158
1159                         } else { // tag
1160                                 db_query("UPDATE ttrss_user_entries
1161                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1162                                                 (SELECT id FROM
1163                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1164                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1165                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1166
1167                         }
1168         }
1169
1170         function getAllCounters() {
1171                 $data = getGlobalCounters();
1172
1173                 $data = array_merge($data, getVirtCounters());
1174                 $data = array_merge($data, getLabelCounters());
1175                 $data = array_merge($data, getFeedCounters());
1176                 $data = array_merge($data, getCategoryCounters());
1177
1178                 return $data;
1179         }
1180
1181         function getCategoryTitle($cat_id) {
1182
1183                 if ($cat_id == -1) {
1184                         return __("Special");
1185                 } else if ($cat_id == -2) {
1186                         return __("Labels");
1187                 } else {
1188
1189                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1190                                 id = '$cat_id'");
1191
1192                         if (db_num_rows($result) == 1) {
1193                                 return db_fetch_result($result, 0, "title");
1194                         } else {
1195                                 return __("Uncategorized");
1196                         }
1197                 }
1198         }
1199
1200
1201         function getCategoryCounters() {
1202                 $ret_arr = array();
1203
1204                 /* Labels category */
1205
1206                 $cv = array("id" => -2, "kind" => "cat",
1207                         "counter" => getCategoryUnread(-2));
1208
1209                 array_push($ret_arr, $cv);
1210
1211                 $result = db_query("SELECT id AS cat_id, value AS unread,
1212                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1213                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1214                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1215                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1216                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1217                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1218
1219                 while ($line = db_fetch_assoc($result)) {
1220                         $line["cat_id"] = (int) $line["cat_id"];
1221
1222                         if ($line["num_children"] > 0) {
1223                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1224                         } else {
1225                                 $child_counter = 0;
1226                         }
1227
1228                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1229                                 "counter" => $line["unread"] + $child_counter);
1230
1231                         array_push($ret_arr, $cv);
1232                 }
1233
1234                 /* Special case: NULL category doesn't actually exist in the DB */
1235
1236                 $cv = array("id" => 0, "kind" => "cat",
1237                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1238
1239                 array_push($ret_arr, $cv);
1240
1241                 return $ret_arr;
1242         }
1243
1244         // only accepts real cats (>= 0)
1245         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1246                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1247
1248                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1249                                 AND owner_uid = $owner_uid");
1250
1251                 $unread = 0;
1252
1253                 while ($line = db_fetch_assoc($result)) {
1254                         $unread += getCategoryUnread($line["id"], $owner_uid);
1255                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1256                 }
1257
1258                 return $unread;
1259         }
1260
1261         function getCategoryUnread($cat, $owner_uid = false) {
1262
1263                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1264
1265                 if ($cat >= 0) {
1266
1267                         if ($cat != 0) {
1268                                 $cat_query = "cat_id = '$cat'";
1269                         } else {
1270                                 $cat_query = "cat_id IS NULL";
1271                         }
1272
1273                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1274                                         AND owner_uid = " . $owner_uid);
1275
1276                         $cat_feeds = array();
1277                         while ($line = db_fetch_assoc($result)) {
1278                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1279                         }
1280
1281                         if (count($cat_feeds) == 0) return 0;
1282
1283                         $match_part = implode(" OR ", $cat_feeds);
1284
1285                         $result = db_query("SELECT COUNT(int_id) AS unread
1286                                 FROM ttrss_user_entries
1287                                 WHERE   unread = true AND ($match_part)
1288                                 AND owner_uid = " . $owner_uid);
1289
1290                         $unread = 0;
1291
1292                         # this needs to be rewritten
1293                         while ($line = db_fetch_assoc($result)) {
1294                                 $unread += $line["unread"];
1295                         }
1296
1297                         return $unread;
1298                 } else if ($cat == -1) {
1299                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1300                 } else if ($cat == -2) {
1301
1302                         $result = db_query("
1303                                 SELECT COUNT(unread) AS unread FROM
1304                                         ttrss_user_entries, ttrss_user_labels2
1305                                 WHERE article_id = ref_id AND unread = true
1306                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1307
1308                         $unread = db_fetch_result($result, 0, "unread");
1309
1310                         return $unread;
1311
1312                 }
1313         }
1314
1315         function getFeedUnread($feed, $is_cat = false) {
1316                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1317         }
1318
1319         function getLabelUnread($label_id, $owner_uid = false) {
1320                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1321
1322                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1323                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1324
1325                 if (db_num_rows($result) != 0) {
1326                         return db_fetch_result($result, 0, "unread");
1327                 } else {
1328                         return 0;
1329                 }
1330         }
1331
1332         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1333                 $owner_uid = false) {
1334
1335                 $n_feed = (int) $feed;
1336                 $need_entries = false;
1337
1338                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1339
1340                 if ($unread_only) {
1341                         $unread_qpart = "unread = true";
1342                 } else {
1343                         $unread_qpart = "true";
1344                 }
1345
1346                 if ($is_cat) {
1347                         return getCategoryUnread($n_feed, $owner_uid);
1348                 } else if ($n_feed == -6) {
1349                         return 0;
1350                 } else if ($feed != "0" && $n_feed == 0) {
1351
1352                         $feed = db_escape_string($feed);
1353
1354                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1355                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1356                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1357                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1358                         return db_fetch_result($result, 0, "count");
1359
1360                 } else if ($n_feed == -1) {
1361                         $match_part = "marked = true";
1362                 } else if ($n_feed == -2) {
1363                         $match_part = "published = true";
1364                 } else if ($n_feed == -3) {
1365                         $match_part = "unread = true AND score >= 0";
1366
1367                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1368
1369                         if (DB_TYPE == "pgsql") {
1370                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1371                         } else {
1372                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1373                         }
1374
1375                         $need_entries = true;
1376
1377                 } else if ($n_feed == -4) {
1378                         $match_part = "true";
1379                 } else if ($n_feed >= 0) {
1380
1381                         if ($n_feed != 0) {
1382                                 $match_part = "feed_id = '$n_feed'";
1383                         } else {
1384                                 $match_part = "feed_id IS NULL";
1385                         }
1386
1387                 } else if ($feed < LABEL_BASE_INDEX) {
1388
1389                         $label_id = feed_to_label_id($feed);
1390
1391                         return getLabelUnread($label_id, $owner_uid);
1392
1393                 }
1394
1395                 if ($match_part) {
1396
1397                         if ($need_entries) {
1398                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1399                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1400                         } else {
1401                                 $from_qpart = "ttrss_user_entries";
1402                         }
1403
1404                         $query = "SELECT count(int_id) AS unread
1405                                 FROM $from_qpart WHERE
1406                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1407
1408                         //echo "[$feed/$query]\n";
1409
1410                         $result = db_query($query);
1411
1412                 } else {
1413
1414                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1415                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1416                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1417                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1418                 }
1419
1420                 $unread = db_fetch_result($result, 0, "unread");
1421
1422                 return $unread;
1423         }
1424
1425         function getGlobalUnread($user_id = false) {
1426
1427                 if (!$user_id) {
1428                         $user_id = $_SESSION["uid"];
1429                 }
1430
1431                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1432                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1433
1434                 $c_id = db_fetch_result($result, 0, "c_id");
1435
1436                 return $c_id;
1437         }
1438
1439         function getGlobalCounters($global_unread = -1) {
1440                 $ret_arr = array();
1441
1442                 if ($global_unread == -1) {
1443                         $global_unread = getGlobalUnread();
1444                 }
1445
1446                 $cv = array("id" => "global-unread",
1447                         "counter" => (int) $global_unread);
1448
1449                 array_push($ret_arr, $cv);
1450
1451                 $result = db_query("SELECT COUNT(id) AS fn FROM
1452                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1453
1454                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1455
1456                 $cv = array("id" => "subscribed-feeds",
1457                         "counter" => (int) $subscribed_feeds);
1458
1459                 array_push($ret_arr, $cv);
1460
1461                 return $ret_arr;
1462         }
1463
1464         function getVirtCounters() {
1465
1466                 $ret_arr = array();
1467
1468                 for ($i = 0; $i >= -4; $i--) {
1469
1470                         $count = getFeedUnread($i);
1471
1472                         if ($i == 0 || $i == -1 || $i == -2)
1473                                 $auxctr = getFeedArticles($i, false);
1474                         else
1475                                 $auxctr = 0;
1476
1477                         $cv = array("id" => $i,
1478                                 "counter" => (int) $count,
1479                                 "auxcounter" => $auxctr);
1480
1481 //                      if (get_pref('EXTENDED_FEEDLIST'))
1482 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1483
1484                         array_push($ret_arr, $cv);
1485                 }
1486
1487                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1488
1489                 if (is_array($feeds)) {
1490                         foreach ($feeds as $feed) {
1491                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1492                                         "counter" => $feed['sender']->get_unread($feed['id']));
1493                                         array_push($ret_arr, $cv);
1494                         }
1495                 }
1496
1497                 return $ret_arr;
1498         }
1499
1500         function getLabelCounters($descriptions = false) {
1501
1502                 $ret_arr = array();
1503
1504                 $owner_uid = $_SESSION["uid"];
1505
1506                 $result = db_query("SELECT id,caption,COUNT(u1.unread) AS unread,COUNT(u2.unread) AS total
1507                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1508                                 (ttrss_labels2.id = label_id)
1509                                 LEFT JOIN ttrss_user_entries AS u1 ON (u1.ref_id = article_id AND u1.unread = true
1510                                         AND u1.owner_uid = $owner_uid)
1511                                 LEFT JOIN ttrss_user_entries AS u2 ON (u2.ref_id = article_id AND u2.unread = false
1512                                         AND u2.owner_uid = $owner_uid)
1513                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1514                                         ttrss_labels2.caption");
1515
1516                 while ($line = db_fetch_assoc($result)) {
1517
1518                         $id = label_to_feed_id($line["id"]);
1519
1520                         $cv = array("id" => $id,
1521                                 "counter" => (int) $line["unread"],
1522                                 "auxcounter" => (int) $line["total"]);
1523
1524                         if ($descriptions)
1525                                 $cv["description"] = $line["caption"];
1526
1527                         array_push($ret_arr, $cv);
1528                 }
1529
1530                 return $ret_arr;
1531         }
1532
1533         function getFeedCounters($active_feed = false) {
1534
1535                 $ret_arr = array();
1536
1537                 $query = "SELECT ttrss_feeds.id,
1538                                 ttrss_feeds.title,
1539                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1540                                 last_error, value AS count
1541                         FROM ttrss_feeds, ttrss_counters_cache
1542                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1543                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1544                                 AND ttrss_counters_cache.feed_id = id";
1545
1546                 $result = db_query($query);
1547                 $fctrs_modified = false;
1548
1549                 while ($line = db_fetch_assoc($result)) {
1550
1551                         $id = $line["id"];
1552                         $count = $line["count"];
1553                         $last_error = htmlspecialchars($line["last_error"]);
1554
1555                         $last_updated = make_local_datetime($line['last_updated'], false);
1556
1557                         $has_img = feed_has_icon($id);
1558
1559                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1560                                 $last_updated = '';
1561
1562                         $cv = array("id" => $id,
1563                                 "updated" => $last_updated,
1564                                 "counter" => (int) $count,
1565                                 "has_img" => (int) $has_img);
1566
1567                         if ($last_error)
1568                                 $cv["error"] = $last_error;
1569
1570 //                      if (get_pref('EXTENDED_FEEDLIST'))
1571 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1572
1573                         if ($active_feed && $id == $active_feed)
1574                                 $cv["title"] = truncate_string($line["title"], 30);
1575
1576                         array_push($ret_arr, $cv);
1577
1578                 }
1579
1580                 return $ret_arr;
1581         }
1582
1583         function get_pgsql_version() {
1584                 $result = db_query("SELECT version() AS version");
1585                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1586                 return $version[1];
1587         }
1588
1589         /**
1590          * @return array (code => Status code, message => error message if available)
1591          *
1592          *                 0 - OK, Feed already exists
1593          *                 1 - OK, Feed added
1594          *                 2 - Invalid URL
1595          *                 3 - URL content is HTML, no feeds available
1596          *                 4 - URL content is HTML which contains multiple feeds.
1597          *                     Here you should call extractfeedurls in rpc-backend
1598          *                     to get all possible feeds.
1599          *                 5 - Couldn't download the URL content.
1600          *                 6 - Content is an invalid XML.
1601          */
1602         function subscribe_to_feed($url, $cat_id = 0,
1603                         $auth_login = '', $auth_pass = '') {
1604
1605                 global $fetch_last_error;
1606
1607                 require_once "include/rssfuncs.php";
1608
1609                 $url = fix_url($url);
1610
1611                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1612
1613                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1614
1615                 if (!$contents) {
1616                         return array("code" => 5, "message" => $fetch_last_error);
1617                 }
1618
1619                 if (is_html($contents)) {
1620                         $feedUrls = get_feeds_from_html($url, $contents);
1621
1622                         if (count($feedUrls) == 0) {
1623                                 return array("code" => 3);
1624                         } else if (count($feedUrls) > 1) {
1625                                 return array("code" => 4, "feeds" => $feedUrls);
1626                         }
1627                         //use feed url as new URL
1628                         $url = key($feedUrls);
1629                 }
1630
1631                 /* libxml_use_internal_errors(true);
1632                 $doc = new DOMDocument();
1633                 $doc->loadXML($contents);
1634                 $error = libxml_get_last_error();
1635                 libxml_clear_errors();
1636
1637                 if ($error) {
1638                         $error_message = format_libxml_error($error);
1639
1640                         return array("code" => 6, "message" => $error_message);
1641                 } */
1642
1643                 if ($cat_id == "0" || !$cat_id) {
1644                         $cat_qpart = "NULL";
1645                 } else {
1646                         $cat_qpart = "'$cat_id'";
1647                 }
1648
1649                 $result = db_query(
1650                         "SELECT id FROM ttrss_feeds
1651                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1652
1653                 if (strlen(FEED_CRYPT_KEY) > 0) {
1654                         require_once "crypt.php";
1655                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1656                         $auth_pass_encrypted = 'true';
1657                 } else {
1658                         $auth_pass_encrypted = 'false';
1659                 }
1660
1661                 $auth_pass = db_escape_string($auth_pass);
1662
1663                 if (db_num_rows($result) == 0) {
1664                         $result = db_query(
1665                                 "INSERT INTO ttrss_feeds
1666                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1667                                 VALUES ('".$_SESSION["uid"]."', '$url',
1668                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1669
1670                         $result = db_query(
1671                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1672                                         AND owner_uid = " . $_SESSION["uid"]);
1673
1674                         $feed_id = db_fetch_result($result, 0, "id");
1675
1676                         if ($feed_id) {
1677                                 update_rss_feed($feed_id, true);
1678                         }
1679
1680                         return array("code" => 1);
1681                 } else {
1682                         return array("code" => 0);
1683                 }
1684         }
1685
1686         function print_feed_select($id, $default_id = "",
1687                 $attributes = "", $include_all_feeds = true,
1688                 $root_id = false, $nest_level = 0) {
1689
1690                 if (!$root_id) {
1691                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1692                         if ($include_all_feeds) {
1693                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1694                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1695                         }
1696                 }
1697
1698                 if (get_pref('ENABLE_FEED_CATS')) {
1699
1700                         if ($root_id)
1701                                 $parent_qpart = "parent_cat = '$root_id'";
1702                         else
1703                                 $parent_qpart = "parent_cat IS NULL";
1704
1705                         $result = db_query("SELECT id,title,
1706                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1707                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1708                                 FROM ttrss_feed_categories
1709                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1710
1711                         while ($line = db_fetch_assoc($result)) {
1712
1713                                 for ($i = 0; $i < $nest_level; $i++)
1714                                         $line["title"] = " - " . $line["title"];
1715
1716                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1717
1718                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1719                                         $line["id"], htmlspecialchars($line["title"]));
1720
1721                                 if ($line["num_children"] > 0)
1722                                         print_feed_select($id, $default_id, $attributes,
1723                                                 $include_all_feeds, $line["id"], $nest_level+1);
1724
1725                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1726                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1727
1728                                 while ($fline = db_fetch_assoc($feed_result)) {
1729                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1730
1731                                         $fline["title"] = " + " . $fline["title"];
1732
1733                                         for ($i = 0; $i < $nest_level; $i++)
1734                                                 $fline["title"] = " - " . $fline["title"];
1735
1736                                         printf("<option $is_selected value='%d'>%s</option>",
1737                                                 $fline["id"], htmlspecialchars($fline["title"]));
1738                                 }
1739                         }
1740
1741                         if (!$root_id) {
1742                                 $default_is_cat = ($default_id == "CAT:0");
1743                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1744
1745                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1746                                         __("Uncategorized"));
1747
1748                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1749                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1750
1751                                 while ($fline = db_fetch_assoc($feed_result)) {
1752                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1753
1754                                         $fline["title"] = " + " . $fline["title"];
1755
1756                                         for ($i = 0; $i < $nest_level; $i++)
1757                                                 $fline["title"] = " - " . $fline["title"];
1758
1759                                         printf("<option $is_selected value='%d'>%s</option>",
1760                                                 $fline["id"], htmlspecialchars($fline["title"]));
1761                                 }
1762                         }
1763
1764                 } else {
1765                         $result = db_query("SELECT id,title FROM ttrss_feeds
1766                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1767
1768                         while ($line = db_fetch_assoc($result)) {
1769
1770                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1771
1772                                 printf("<option $is_selected value='%d'>%s</option>",
1773                                         $line["id"], htmlspecialchars($line["title"]));
1774                         }
1775                 }
1776
1777                 if (!$root_id) {
1778                         print "</select>";
1779                 }
1780         }
1781
1782         function print_feed_cat_select($id, $default_id,
1783                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1784
1785                         if (!$root_id) {
1786                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1787                         }
1788
1789                         if ($root_id)
1790                                 $parent_qpart = "parent_cat = '$root_id'";
1791                         else
1792                                 $parent_qpart = "parent_cat IS NULL";
1793
1794                         $result = db_query("SELECT id,title,
1795                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1796                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1797                                 FROM ttrss_feed_categories
1798                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1799
1800                         while ($line = db_fetch_assoc($result)) {
1801                                 if ($line["id"] == $default_id) {
1802                                         $is_selected = "selected=\"1\"";
1803                                 } else {
1804                                         $is_selected = "";
1805                                 }
1806
1807                                 for ($i = 0; $i < $nest_level; $i++)
1808                                         $line["title"] = " - " . $line["title"];
1809
1810                                 if ($line["title"])
1811                                         printf("<option $is_selected value='%d'>%s</option>",
1812                                                 $line["id"], htmlspecialchars($line["title"]));
1813
1814                                 if ($line["num_children"] > 0)
1815                                         print_feed_cat_select($id, $default_id, $attributes,
1816                                                 $include_all_cats, $line["id"], $nest_level+1);
1817                         }
1818
1819                         if (!$root_id) {
1820                                 if ($include_all_cats) {
1821                                         if (db_num_rows($result) > 0) {
1822                                                 print "<option disabled=\"1\">--------</option>";
1823                                         }
1824
1825                                         if ($default_id == 0) {
1826                                                 $is_selected = "selected=\"1\"";
1827                                         } else {
1828                                                 $is_selected = "";
1829                                         }
1830
1831                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1832                                 }
1833                                 print "</select>";
1834                         }
1835                 }
1836
1837         function checkbox_to_sql_bool($val) {
1838                 return ($val == "on") ? "true" : "false";
1839         }
1840
1841         function getFeedCatTitle($id) {
1842                 if ($id == -1) {
1843                         return __("Special");
1844                 } else if ($id < LABEL_BASE_INDEX) {
1845                         return __("Labels");
1846                 } else if ($id > 0) {
1847                         $result = db_query("SELECT ttrss_feed_categories.title
1848                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1849                                         cat_id = ttrss_feed_categories.id");
1850                         if (db_num_rows($result) == 1) {
1851                                 return db_fetch_result($result, 0, "title");
1852                         } else {
1853                                 return __("Uncategorized");
1854                         }
1855                 } else {
1856                         return "getFeedCatTitle($id) failed";
1857                 }
1858
1859         }
1860
1861         function getFeedIcon($id) {
1862                 switch ($id) {
1863                 case 0:
1864                         return "images/archive.png";
1865                         break;
1866                 case -1:
1867                         return "images/mark_set.svg";
1868                         break;
1869                 case -2:
1870                         return "images/pub_set.svg";
1871                         break;
1872                 case -3:
1873                         return "images/fresh.png";
1874                         break;
1875                 case -4:
1876                         return "images/tag.png";
1877                         break;
1878                 case -6:
1879                         return "images/recently_read.png";
1880                         break;
1881                 default:
1882                         if ($id < LABEL_BASE_INDEX) {
1883                                 return "images/label.png";
1884                         } else {
1885                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1886                                         return ICONS_URL . "/$id.ico";
1887                         }
1888                         break;
1889                 }
1890
1891                 return false;
1892         }
1893
1894         function getFeedTitle($id, $cat = false) {
1895                 if ($cat) {
1896                         return getCategoryTitle($id);
1897                 } else if ($id == -1) {
1898                         return __("Starred articles");
1899                 } else if ($id == -2) {
1900                         return __("Published articles");
1901                 } else if ($id == -3) {
1902                         return __("Fresh articles");
1903                 } else if ($id == -4) {
1904                         return __("All articles");
1905                 } else if ($id === 0 || $id === "0") {
1906                         return __("Archived articles");
1907                 } else if ($id == -6) {
1908                         return __("Recently read");
1909                 } else if ($id < LABEL_BASE_INDEX) {
1910                         $label_id = feed_to_label_id($id);
1911                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1912                         if (db_num_rows($result) == 1) {
1913                                 return db_fetch_result($result, 0, "caption");
1914                         } else {
1915                                 return "Unknown label ($label_id)";
1916                         }
1917
1918                 } else if (is_numeric($id) && $id > 0) {
1919                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1920                         if (db_num_rows($result) == 1) {
1921                                 return db_fetch_result($result, 0, "title");
1922                         } else {
1923                                 return "Unknown feed ($id)";
1924                         }
1925                 } else {
1926                         return $id;
1927                 }
1928         }
1929
1930         function make_init_params() {
1931                 $params = array();
1932
1933                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1934                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1935                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1936                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1937
1938                                  $params[strtolower($param)] = (int) get_pref($param);
1939                  }
1940
1941                 $params["icons_url"] = ICONS_URL;
1942                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1943                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1944                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1945                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1946                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1947                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1948
1949                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1950                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1951
1952                 $max_feed_id = db_fetch_result($result, 0, "mid");
1953                 $num_feeds = db_fetch_result($result, 0, "nf");
1954
1955                 $params["max_feed_id"] = (int) $max_feed_id;
1956                 $params["num_feeds"] = (int) $num_feeds;
1957
1958                 $params["collapsed_feedlist"] = (int) get_pref("_COLLAPSED_FEEDLIST");
1959                 $params["hotkeys"] = get_hotkeys_map();
1960
1961                 $params["csrf_token"] = $_SESSION["csrf_token"];
1962                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1963
1964                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1965
1966                 return $params;
1967         }
1968
1969         function get_hotkeys_info() {
1970                 $hotkeys = array(
1971                         __("Navigation") => array(
1972                                 "next_feed" => __("Open next feed"),
1973                                 "prev_feed" => __("Open previous feed"),
1974                                 "next_article" => __("Open next article"),
1975                                 "prev_article" => __("Open previous article"),
1976                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1977                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1978                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1979                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1980                                 "search_dialog" => __("Show search dialog")),
1981                         __("Article") => array(
1982                                 "toggle_mark" => __("Toggle starred"),
1983                                 "toggle_publ" => __("Toggle published"),
1984                                 "toggle_unread" => __("Toggle unread"),
1985                                 "edit_tags" => __("Edit tags"),
1986                                 "dismiss_selected" => __("Dismiss selected"),
1987                                 "dismiss_read" => __("Dismiss read"),
1988                                 "open_in_new_window" => __("Open in new window"),
1989                                 "catchup_below" => __("Mark below as read"),
1990                                 "catchup_above" => __("Mark above as read"),
1991                                 "article_scroll_down" => __("Scroll down"),
1992                                 "article_scroll_up" => __("Scroll up"),
1993                                 "select_article_cursor" => __("Select article under cursor"),
1994                                 "email_article" => __("Email article"),
1995                                 "close_article" => __("Close/collapse article"),
1996                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
1997                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1998                                 "toggle_embed_original" => __("Toggle embed original")),
1999                         __("Article selection") => array(
2000                                 "select_all" => __("Select all articles"),
2001                                 "select_unread" => __("Select unread"),
2002                                 "select_marked" => __("Select starred"),
2003                                 "select_published" => __("Select published"),
2004                                 "select_invert" => __("Invert selection"),
2005                                 "select_none" => __("Deselect everything")),
2006                         __("Feed") => array(
2007                                 "feed_refresh" => __("Refresh current feed"),
2008                                 "feed_unhide_read" => __("Un/hide read feeds"),
2009                                 "feed_subscribe" => __("Subscribe to feed"),
2010                                 "feed_edit" => __("Edit feed"),
2011                                 "feed_catchup" => __("Mark as read"),
2012                                 "feed_reverse" => __("Reverse headlines"),
2013                                 "feed_debug_update" => __("Debug feed update"),
2014                                 "catchup_all" => __("Mark all feeds as read"),
2015                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2016                                 "toggle_combined_mode" => __("Toggle combined mode"),
2017                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2018                         __("Go to") => array(
2019                                 "goto_all" => __("All articles"),
2020                                 "goto_fresh" => __("Fresh"),
2021                                 "goto_marked" => __("Starred"),
2022                                 "goto_published" => __("Published"),
2023                                 "goto_tagcloud" => __("Tag cloud"),
2024                                 "goto_prefs" => __("Preferences")),
2025                         __("Other") => array(
2026                                 "create_label" => __("Create label"),
2027                                 "create_filter" => __("Create filter"),
2028                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2029                                 "help_dialog" => __("Show help dialog"))
2030                         );
2031
2032                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2033                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2034                 }
2035
2036                 return $hotkeys;
2037         }
2038
2039         function get_hotkeys_map() {
2040                 $hotkeys = array(
2041 //                      "navigation" => array(
2042                                 "k" => "next_feed",
2043                                 "j" => "prev_feed",
2044                                 "n" => "next_article",
2045                                 "p" => "prev_article",
2046                                 "(38)|up" => "prev_article",
2047                                 "(40)|down" => "next_article",
2048 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2049 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2050                                 "(191)|/" => "search_dialog",
2051 //                      "article" => array(
2052                                 "s" => "toggle_mark",
2053                                 "*s" => "toggle_publ",
2054                                 "u" => "toggle_unread",
2055                                 "*t" => "edit_tags",
2056                                 "*d" => "dismiss_selected",
2057                                 "*x" => "dismiss_read",
2058                                 "o" => "open_in_new_window",
2059                                 "c p" => "catchup_below",
2060                                 "c n" => "catchup_above",
2061                                 "*n" => "article_scroll_down",
2062                                 "*p" => "article_scroll_up",
2063                                 "*(38)|Shift+up" => "article_scroll_up",
2064                                 "*(40)|Shift+down" => "article_scroll_down",
2065                                 "a *w" => "toggle_widescreen",
2066                                 "a e" => "toggle_embed_original",
2067                                 "e" => "email_article",
2068                                 "a q" => "close_article",
2069 //                      "article_selection" => array(
2070                                 "a a" => "select_all",
2071                                 "a u" => "select_unread",
2072                                 "a *u" => "select_marked",
2073                                 "a p" => "select_published",
2074                                 "a i" => "select_invert",
2075                                 "a n" => "select_none",
2076 //                      "feed" => array(
2077                                 "f r" => "feed_refresh",
2078                                 "f a" => "feed_unhide_read",
2079                                 "f s" => "feed_subscribe",
2080                                 "f e" => "feed_edit",
2081                                 "f q" => "feed_catchup",
2082                                 "f x" => "feed_reverse",
2083                                 "f *d" => "feed_debug_update",
2084                                 "f *c" => "toggle_combined_mode",
2085                                 "f c" => "toggle_cdm_expanded",
2086                                 "*q" => "catchup_all",
2087                                 "x" => "cat_toggle_collapse",
2088 //                      "goto" => array(
2089                                 "g a" => "goto_all",
2090                                 "g f" => "goto_fresh",
2091                                 "g s" => "goto_marked",
2092                                 "g p" => "goto_published",
2093                                 "g t" => "goto_tagcloud",
2094                                 "g *p" => "goto_prefs",
2095 //                      "other" => array(
2096                                 "(9)|Tab" => "select_article_cursor", // tab
2097                                 "c l" => "create_label",
2098                                 "c f" => "create_filter",
2099                                 "c s" => "collapse_sidebar",
2100                                 "^(191)|Ctrl+/" => "help_dialog",
2101                         );
2102
2103                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2104                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2105                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2106                 }
2107
2108                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2109                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2110                 }
2111
2112                 $prefixes = array();
2113
2114                 foreach (array_keys($hotkeys) as $hotkey) {
2115                         $pair = explode(" ", $hotkey, 2);
2116
2117                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2118                                 array_push($prefixes, $pair[0]);
2119                         }
2120                 }
2121
2122                 return array($prefixes, $hotkeys);
2123         }
2124
2125         function make_runtime_info() {
2126                 $data = array();
2127
2128                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2129                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2130
2131                 $max_feed_id = db_fetch_result($result, 0, "mid");
2132                 $num_feeds = db_fetch_result($result, 0, "nf");
2133
2134                 $data["max_feed_id"] = (int) $max_feed_id;
2135                 $data["num_feeds"] = (int) $num_feeds;
2136
2137                 $data['last_article_id'] = getLastArticleId();
2138                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2139
2140                 $data['dep_ts'] = calculate_dep_timestamp();
2141                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2142
2143                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2144
2145                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2146
2147                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2148
2149                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2150
2151                                 if ($stamp) {
2152                                         $stamp_delta = time() - $stamp;
2153
2154                                         if ($stamp_delta > 1800) {
2155                                                 $stamp_check = 0;
2156                                         } else {
2157                                                 $stamp_check = 1;
2158                                                 $_SESSION["daemon_stamp_check"] = time();
2159                                         }
2160
2161                                         $data['daemon_stamp_ok'] = $stamp_check;
2162
2163                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2164
2165                                         $data['daemon_stamp'] = $stamp_fmt;
2166                                 }
2167                         }
2168                 }
2169
2170                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2171                                 $new_version_details = @check_for_update();
2172
2173                                 $data['new_version_available'] = (int) ($new_version_details != false);
2174
2175                                 $_SESSION["last_version_check"] = time();
2176                                 $_SESSION["version_data"] = $new_version_details;
2177                 }
2178
2179                 return $data;
2180         }
2181
2182         function search_to_sql($search) {
2183
2184                 $search_query_part = "";
2185
2186                 $keywords = explode(" ", $search);
2187                 $query_keywords = array();
2188
2189                 foreach ($keywords as $k) {
2190                         if (strpos($k, "-") === 0) {
2191                                 $k = substr($k, 1);
2192                                 $not = "NOT";
2193                         } else {
2194                                 $not = "";
2195                         }
2196
2197                         $commandpair = explode(":", mb_strtolower($k), 2);
2198
2199                         switch ($commandpair[0]) {
2200                         case "title":
2201                                 if ($commandpair[1]) {
2202                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2203                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2204                                 } else {
2205                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2206                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2207                                 }
2208                                 break;
2209                         case "author":
2210                                 if ($commandpair[1]) {
2211                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2212                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2213                                 } else {
2214                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2215                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2216                                 }
2217                                 break;
2218                         case "note":
2219                                 if ($commandpair[1]) {
2220                                         if ($commandpair[1] == "true")
2221                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2222                                         else if ($commandpair[1] == "false")
2223                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2224                                         else
2225                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2226                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2227                                 } else {
2228                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2229                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2230                                 }
2231                                 break;
2232                         case "star":
2233
2234                                 if ($commandpair[1]) {
2235                                         if ($commandpair[1] == "true")
2236                                                 array_push($query_keywords, "($not (marked = true))");
2237                                         else
2238                                                 array_push($query_keywords, "($not (marked = false))");
2239                                 } else {
2240                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2241                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2242                                 }
2243                                 break;
2244                         case "pub":
2245                                 if ($commandpair[1]) {
2246                                         if ($commandpair[1] == "true")
2247                                                 array_push($query_keywords, "($not (published = true))");
2248                                         else
2249                                                 array_push($query_keywords, "($not (published = false))");
2250
2251                                 } else {
2252                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2253                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2254                                 }
2255                                 break;
2256                         default:
2257                                 if (strpos($k, "@") === 0) {
2258
2259                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2260                                         $orig_ts = strtotime(substr($k, 1));
2261                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2262
2263                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2264
2265                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2266                                 } else {
2267                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2268                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2269                                 }
2270                         }
2271                 }
2272
2273                 $search_query_part = implode("AND", $query_keywords);
2274
2275                 return $search_query_part;
2276         }
2277
2278         function getParentCategories($cat, $owner_uid) {
2279                 $rv = array();
2280
2281                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2282                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2283
2284                 while ($line = db_fetch_assoc($result)) {
2285                         array_push($rv, $line["parent_cat"]);
2286                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2287                 }
2288
2289                 return $rv;
2290         }
2291
2292         function getChildCategories($cat, $owner_uid) {
2293                 $rv = array();
2294
2295                 $result = db_query("SELECT id FROM ttrss_feed_categories
2296                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2297
2298                 while ($line = db_fetch_assoc($result)) {
2299                         array_push($rv, $line["id"]);
2300                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2301                 }
2302
2303                 return $rv;
2304         }
2305
2306         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2307
2308                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2309
2310                 $ext_tables_part = "";
2311
2312                         if ($search) {
2313
2314                                 if (SPHINX_ENABLED) {
2315                                         $ids = join(",", @sphinx_search($search, 0, 500));
2316
2317                                         if ($ids)
2318                                                 $search_query_part = "ref_id IN ($ids) AND ";
2319                                         else
2320                                                 $search_query_part = "ref_id = -1 AND ";
2321
2322                                 } else {
2323                                         $search_query_part = search_to_sql($search);
2324                                         $search_query_part .= " AND ";
2325                                 }
2326
2327                         } else {
2328                                 $search_query_part = "";
2329                         }
2330
2331                         if ($filter) {
2332
2333                                 if (DB_TYPE == "pgsql") {
2334                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2335                                 } else {
2336                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2337                                 }
2338
2339                                 $override_order = "updated DESC";
2340
2341                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2342
2343                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2344
2345
2346                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2347                                         ttrss_user_entries, ttrss_feeds
2348                                         WHERE $filter_query_part LIMIT 1", false);
2349
2350                                 if ($result) {
2351                                         $test = db_fetch_result($result, 0, "true_val");
2352
2353                                         if (!$test) {
2354                                                 $filter_query_part = "false AND";
2355                                         } else {
2356                                                 $filter_query_part .= " AND";
2357                                         }
2358                                 } else {
2359                                         $filter_query_part = "false AND";
2360                                 }
2361
2362                         } else {
2363                                 $filter_query_part = "";
2364                         }
2365
2366                         if ($since_id) {
2367                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2368                         } else {
2369                                 $since_id_part = "";
2370                         }
2371
2372                         $view_query_part = "";
2373
2374                         if ($view_mode == "adaptive") {
2375                                 if ($search) {
2376                                         $view_query_part = " ";
2377                                 } else if ($feed != -1) {
2378
2379                                         $unread = getFeedUnread($feed, $cat_view);
2380
2381                                         if ($cat_view && $feed > 0 && $include_children)
2382                                                 $unread += getCategoryChildrenUnread($feed);
2383
2384                                         if ($unread > 0)
2385                                 $view_query_part = " unread = true AND ";
2386
2387                                 }
2388                         }
2389
2390                         if ($view_mode == "marked") {
2391                                 $view_query_part = " marked = true AND ";
2392                         }
2393
2394                         if ($view_mode == "has_note") {
2395                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2396                         }
2397
2398                         if ($view_mode == "published") {
2399                                 $view_query_part = " published = true AND ";
2400                         }
2401
2402                         if ($view_mode == "unread" && $feed != -6) {
2403                                 $view_query_part = " unread = true AND ";
2404                         }
2405
2406                         if ($limit > 0) {
2407                                 $limit_query_part = "LIMIT " . $limit;
2408                         }
2409
2410                         $allow_archived = false;
2411
2412                         $vfeed_query_part = "";
2413
2414                         // override query strategy and enable feed display when searching globally
2415                         if ($search && $search_mode == "all_feeds") {
2416                                 $query_strategy_part = "true";
2417                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2418                         /* tags */
2419                         } else if (!is_numeric($feed)) {
2420                                 $query_strategy_part = "true";
2421                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2422                                         id = feed_id) as feed_title,";
2423                         } else if ($search && $search_mode == "this_cat") {
2424                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2425
2426                                 if ($feed > 0) {
2427                                         if ($include_children) {
2428                                                 $subcats = getChildCategories($feed, $owner_uid);
2429                                                 array_push($subcats, $feed);
2430                                                 $cats_qpart = join(",", $subcats);
2431                                         } else {
2432                                                 $cats_qpart = $feed;
2433                                         }
2434
2435                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2436
2437                                 } else {
2438                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2439                                 }
2440
2441                         } else if ($feed > 0) {
2442
2443                                 if ($cat_view) {
2444
2445                                         if ($feed > 0) {
2446                                                 if ($include_children) {
2447                                                         # sub-cats
2448                                                         $subcats = getChildCategories($feed, $owner_uid);
2449
2450                                                         array_push($subcats, $feed);
2451                                                         $query_strategy_part = "cat_id IN (".
2452                                                                         implode(",", $subcats).")";
2453
2454                                                 } else {
2455                                                         $query_strategy_part = "cat_id = '$feed'";
2456                                                 }
2457
2458                                         } else {
2459                                                 $query_strategy_part = "cat_id IS NULL";
2460                                         }
2461
2462                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2463
2464                                 } else {
2465                                         $query_strategy_part = "feed_id = '$feed'";
2466                                 }
2467                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2468                                 $query_strategy_part = "feed_id IS NULL";
2469                                 $allow_archived = true;
2470                         } else if ($feed == 0 && $cat_view) { // uncategorized
2471                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2472                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2473                         } else if ($feed == -1) { // starred virtual feed
2474                                 $query_strategy_part = "marked = true";
2475                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2476                                 $allow_archived = true;
2477
2478                                 if (!$override_order) {
2479                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2480                                 }
2481
2482                         } else if ($feed == -2) { // published virtual feed OR labels category
2483
2484                                 if (!$cat_view) {
2485                                         $query_strategy_part = "published = true";
2486                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2487                                         $allow_archived = true;
2488
2489                                         if (!$override_order) {
2490                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2491                                         }
2492
2493                                 } else {
2494                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2495
2496                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2497
2498                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2499                                                 ttrss_user_labels2.article_id = ref_id";
2500
2501                                 }
2502                         } else if ($feed == -6) { // recently read
2503                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2504                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2505                                 $allow_archived = true;
2506
2507                                 if (!$override_order) $override_order = "last_read DESC";
2508                         } else if ($feed == -3) { // fresh virtual feed
2509                                 $query_strategy_part = "unread = true AND score >= 0";
2510
2511                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2512
2513                                 if (DB_TYPE == "pgsql") {
2514                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2515                                 } else {
2516                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2517                                 }
2518
2519                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2520                         } else if ($feed == -4) { // all articles virtual feed
2521                                 $allow_archived = true;
2522                                 $query_strategy_part = "true";
2523                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2524                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2525                                 $label_id = feed_to_label_id($feed);
2526
2527                                 $query_strategy_part = "label_id = '$label_id' AND
2528                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2529                                         ttrss_user_labels2.article_id = ref_id";
2530
2531                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2532                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2533                                 $allow_archived = true;
2534
2535                         } else {
2536                                 $query_strategy_part = "true";
2537                         }
2538
2539                         $order_by = "score DESC, date_entered DESC, updated DESC";
2540
2541                         if ($view_mode == "unread_first") {
2542                                 $order_by = "unread DESC, $order_by";
2543                         }
2544
2545                         if ($override_order) {
2546                                 $order_by = $override_order;
2547                         }
2548
2549                         $feed_title = "";
2550
2551                         if ($search) {
2552                                 $feed_title = T_sprintf("Search results: %s", $search);
2553                         } else {
2554                                 if ($cat_view) {
2555                                         $feed_title = getCategoryTitle($feed);
2556                                 } else {
2557                                         if (is_numeric($feed) && $feed > 0) {
2558                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2559                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2560
2561                                                 $feed_title = db_fetch_result($result, 0, "title");
2562                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2563                                                 $last_error = db_fetch_result($result, 0, "last_error");
2564                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2565                                         } else {
2566                                                 $feed_title = getFeedTitle($feed);
2567                                         }
2568                                 }
2569                         }
2570
2571                         $content_query_part = "content as content_preview, cached_content, ";
2572
2573                         if (is_numeric($feed)) {
2574
2575                                 if ($feed >= 0) {
2576                                         $feed_kind = "Feeds";
2577                                 } else {
2578                                         $feed_kind = "Labels";
2579                                 }
2580
2581                                 if ($limit_query_part) {
2582                                         $offset_query_part = "OFFSET $offset";
2583                                 }
2584
2585                                 // proper override_order applied above
2586                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2587                                         if (!$override_order) {
2588                                                 $order_by = "ttrss_feeds.title, $order_by";
2589                                         } else {
2590                                                 $order_by = "ttrss_feeds.title, $override_order";
2591                                         }
2592                                 }
2593
2594                                 if (!$allow_archived) {
2595                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2596                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2597
2598                                 } else {
2599                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2600                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2601                                 }
2602
2603                                 if ($vfeed_query_part)
2604                                         $vfeed_query_part .= "favicon_avg_color,";
2605
2606                                 $query = "SELECT DISTINCT
2607                                                 date_entered,
2608                                                 guid,
2609                                                 ttrss_entries.id,ttrss_entries.title,
2610                                                 updated,
2611                                                 label_cache,
2612                                                 tag_cache,
2613                                                 always_display_enclosures,
2614                                                 site_url,
2615                                                 note,
2616                                                 num_comments,
2617                                                 comments,
2618                                                 int_id,
2619                                                 hide_images,
2620                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2621                                                 last_marked, last_published,
2622                                                 $vfeed_query_part
2623                                                 $content_query_part
2624                                                 author,score
2625                                         FROM
2626                                                 $from_qpart
2627                                         WHERE
2628                                         $feed_check_qpart
2629                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2630                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2631                                         $search_query_part
2632                                         $filter_query_part
2633                                         $view_query_part
2634                                         $since_id_part
2635                                         $query_strategy_part ORDER BY $order_by
2636                                         $limit_query_part $offset_query_part";
2637
2638                                 if ($_REQUEST["debug"]) print $query;
2639
2640                                 $result = db_query($query);
2641
2642                         } else {
2643                                 // browsing by tag
2644
2645                                 $select_qpart = "SELECT DISTINCT " .
2646                                                                 "date_entered," .
2647                                                                 "guid," .
2648                                                                 "note," .
2649                                                                 "ttrss_entries.id as id," .
2650                                                                 "title," .
2651                                                                 "updated," .
2652                                                                 "unread," .
2653                                                                 "feed_id," .
2654                                                                 "orig_feed_id," .
2655                                                                 "marked," .
2656                                                                 "num_comments, " .
2657                                                                 "comments, " .
2658                                                                 "tag_cache," .
2659                                                                 "label_cache," .
2660                                                                 "link," .
2661                                                                 "last_read," .
2662                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2663                                                                 "last_marked, last_published, " .
2664                                                                 $since_id_part .
2665                                                                 $vfeed_query_part .
2666                                                                 $content_query_part .
2667                                                                 "score ";
2668
2669                                 $feed_kind = "Tags";
2670                                 $all_tags = explode(",", $feed);
2671                                 if ($search_mode == 'any') {
2672                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2673                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2674                                         $where_qpart = " WHERE " .
2675                                                                    "ref_id = ttrss_entries.id AND " .
2676                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2677                                                                    "post_int_id = int_id AND $tag_sql AND " .
2678                                                                    $view_query_part .
2679                                                                    $search_query_part .
2680                                                                    $query_strategy_part . " ORDER BY $order_by " .
2681                                                                    $limit_query_part;
2682
2683                                 } else {
2684                                         $i = 1;
2685                                         $sub_selects = array();
2686                                         $sub_ands = array();
2687                                         foreach ($all_tags as $term) {
2688                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2689                                                 $i++;
2690                                         }
2691                                         if ($i > 2) {
2692                                                 $x = 1;
2693                                                 $y = 2;
2694                                                 do {
2695                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2696                                                         $x++;
2697                                                         $y++;
2698                                                 } while ($y < $i);
2699                                         }
2700                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2701                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2702                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2703                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2704                                 }
2705                                 //                              error_log("TAG SQL: " . $tag_sql);
2706                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2707
2708                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2709                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2710                         }
2711
2712                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated);
2713
2714         }
2715
2716         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false) {
2717                 if (!$owner) $owner = $_SESSION["uid"];
2718
2719                 $res = trim($str); if (!$res) return '';
2720
2721                 if (strpos($res, "href=") === false)
2722                         $res = rewrite_urls($res);
2723
2724                 $charset_hack = '<head>
2725                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2726                 </head>';
2727
2728                 $res = trim($res); if (!$res) return '';
2729
2730                 libxml_use_internal_errors(true);
2731
2732                 $doc = new DOMDocument();
2733                 $doc->loadHTML($charset_hack . $res);
2734                 $xpath = new DOMXPath($doc);
2735
2736                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2737
2738                 foreach ($entries as $entry) {
2739
2740                         if ($site_url) {
2741
2742                                 if ($entry->hasAttribute('href'))
2743                                         $entry->setAttribute('href',
2744                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2745
2746                                 if ($entry->hasAttribute('src')) {
2747                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2748
2749                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2750
2751                                         if (file_exists($cached_filename)) {
2752                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2753                                         }
2754
2755                                         $entry->setAttribute('src', $src);
2756                                 }
2757
2758                                 if ($entry->nodeName == 'img') {
2759                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2760                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2761
2762                                                 $p = $doc->createElement('p');
2763
2764                                                 $a = $doc->createElement('a');
2765                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2766
2767                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2768                                                 $a->setAttribute('target', '_blank');
2769
2770                                                 $p->appendChild($a);
2771
2772                                                 $entry->parentNode->replaceChild($p, $entry);
2773                                         }
2774                                 }
2775                         }
2776
2777                         if (strtolower($entry->nodeName) == "a") {
2778                                 $entry->setAttribute("target", "_blank");
2779                         }
2780                 }
2781
2782                 $entries = $xpath->query('//iframe');
2783                 foreach ($entries as $entry) {
2784                         $entry->setAttribute('sandbox', 'allow-scripts');
2785
2786                 }
2787
2788                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2789                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2790                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2791                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2792                         'dt', 'em', 'footer', 'figure', 'figcaption',
2793                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2794                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2795                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2796                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2797                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2798                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2799
2800                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2801
2802                 $disallowed_attributes = array('id', 'style', 'class');
2803
2804                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2805                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2806                         if (is_array($retval)) {
2807                                 $doc = $retval[0];
2808                                 $allowed_elements = $retval[1];
2809                                 $disallowed_attributes = $retval[2];
2810                         } else {
2811                                 $doc = $retval;
2812                         }
2813                 }
2814
2815                 $doc->removeChild($doc->firstChild); //remove doctype
2816                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2817                 $res = $doc->saveHTML();
2818                 return $res;
2819         }
2820
2821         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2822                 $xpath = new DOMXPath($doc);
2823                 $entries = $xpath->query('//*');
2824
2825                 foreach ($entries as $entry) {
2826                         if (!in_array($entry->nodeName, $allowed_elements)) {
2827                                 $entry->parentNode->removeChild($entry);
2828                         }
2829
2830                         if ($entry->hasAttributes()) {
2831                                 $attrs_to_remove = array();
2832
2833                                 foreach ($entry->attributes as $attr) {
2834
2835                                         if (strpos($attr->nodeName, 'on') === 0) {
2836                                                 array_push($attrs_to_remove, $attr);
2837                                         }
2838
2839                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2840                                                 array_push($attrs_to_remove, $attr);
2841                                         }
2842                                 }
2843
2844                                 foreach ($attrs_to_remove as $attr) {
2845                                         $entry->removeAttributeNode($attr);
2846                                 }
2847                         }
2848                 }
2849
2850                 return $doc;
2851         }
2852
2853         function check_for_update() {
2854                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2855                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2856                                 "&iid=" . sha1(SELF_URL_PATH);
2857
2858                         $version_data = @fetch_file_contents($version_url);
2859
2860                         if ($version_data) {
2861                                 $version_data = json_decode($version_data, true);
2862                                 if ($version_data && $version_data['version']) {
2863                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2864                                                 return $version_data;
2865                                         }
2866                                 }
2867                         }
2868                 }
2869                 return false;
2870         }
2871
2872         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2873
2874                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2875                 if (count($ids) == 0) return;
2876
2877                 $tmp_ids = array();
2878
2879                 foreach ($ids as $id) {
2880                         array_push($tmp_ids, "ref_id = '$id'");
2881                 }
2882
2883                 $ids_qpart = join(" OR ", $tmp_ids);
2884
2885                 if ($cmode == 0) {
2886                         db_query("UPDATE ttrss_user_entries SET
2887                         unread = false,last_read = NOW()
2888                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2889                 } else if ($cmode == 1) {
2890                         db_query("UPDATE ttrss_user_entries SET
2891                         unread = true
2892                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2893                 } else {
2894                         db_query("UPDATE ttrss_user_entries SET
2895                         unread = NOT unread,last_read = NOW()
2896                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2897                 }
2898
2899                 /* update ccache */
2900
2901                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2902                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2903
2904                 while ($line = db_fetch_assoc($result)) {
2905                         ccache_update($line["feed_id"], $owner_uid);
2906                 }
2907         }
2908
2909         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2910
2911                 $a_id = db_escape_string($id);
2912
2913                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2914
2915                 $query = "SELECT DISTINCT tag_name,
2916                         owner_uid as owner FROM
2917                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2918                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2919
2920                 $tags = array();
2921
2922                 /* check cache first */
2923
2924                 if ($tag_cache === false) {
2925                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
2926                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2927
2928                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2929                 }
2930
2931                 if ($tag_cache) {
2932                         $tags = explode(",", $tag_cache);
2933                 } else {
2934
2935                         /* do it the hard way */
2936
2937                         $tmp_result = db_query($query);
2938
2939                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2940                                 array_push($tags, $tmp_line["tag_name"]);
2941                         }
2942
2943                         /* update the cache */
2944
2945                         $tags_str = db_escape_string(join(",", $tags));
2946
2947                         db_query("UPDATE ttrss_user_entries
2948                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2949                                 AND owner_uid = $owner_uid");
2950                 }
2951
2952                 return $tags;
2953         }
2954
2955         function trim_array($array) {
2956                 $tmp = $array;
2957                 array_walk($tmp, 'trim');
2958                 return $tmp;
2959         }
2960
2961         function tag_is_valid($tag) {
2962                 if ($tag == '') return false;
2963                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2964                 if (mb_strlen($tag) > 250) return false;
2965
2966                 if (function_exists('iconv')) {
2967                         $tag = iconv("utf-8", "utf-8", $tag);
2968                 }
2969
2970                 if (!$tag) return false;
2971
2972                 return true;
2973         }
2974
2975         function render_login_form() {
2976                 header('Cache-Control: public');
2977
2978                 require_once "login_form.php";
2979                 exit;
2980         }
2981
2982         function format_warning($msg, $id = "") {
2983                 global $link;
2984                 return "<div class=\"warning\" id=\"$id\">
2985                         <span><img src=\"images/sign_excl.svg\"></span><span>$msg</span></div>";
2986         }
2987
2988         function format_notice($msg, $id = "") {
2989                 global $link;
2990                 return "<div class=\"notice\" id=\"$id\">
2991                         <span><img src=\"images/sign_info.svg\"></span><span>$msg</span></div>";
2992         }
2993
2994         function format_error($msg, $id = "") {
2995                 global $link;
2996                 return "<div class=\"error\" id=\"$id\">
2997                         <span><img src=\"images/sign_excl.svg\"></span><span>$msg</span></div>";
2998         }
2999
3000         function print_notice($msg) {
3001                 return print format_notice($msg);
3002         }
3003
3004         function print_warning($msg) {
3005                 return print format_warning($msg);
3006         }
3007
3008         function print_error($msg) {
3009                 return print format_error($msg);
3010         }
3011
3012
3013         function T_sprintf() {
3014                 $args = func_get_args();
3015                 return vsprintf(__(array_shift($args)), $args);
3016         }
3017
3018         function format_inline_player($url, $ctype) {
3019
3020                 $entry = "";
3021
3022                 $url = htmlspecialchars($url);
3023
3024                 if (strpos($ctype, "audio/") === 0) {
3025
3026                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3027                                 $_SESSION["hasMp3"])) {
3028
3029                                 $entry .= "<audio controls>
3030                                         <source type=\"$ctype\" src=\"$url\"></source>
3031                                         </audio>";
3032
3033                         } else {
3034
3035                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3036                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3037                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3038                                         <param name=\"movie\"
3039                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3040                                         </object>";
3041                         }
3042
3043                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3044                                 href=\"$url\">" . basename($url) . "</a>";
3045
3046                         return $entry;
3047
3048                 }
3049
3050                 return "";
3051
3052 /*              $filename = substr($url, strrpos($url, "/")+1);
3053
3054                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3055                         $filename . " (" . $ctype . ")" . "</a>"; */
3056
3057         }
3058
3059         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3060                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3061
3062                 $rv = array();
3063
3064                 $rv['id'] = $id;
3065
3066                 /* we can figure out feed_id from article id anyway, why do we
3067                  * pass feed_id here? let's ignore the argument :(*/
3068
3069                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3070                         WHERE ref_id = '$id'");
3071
3072                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3073
3074                 $rv['feed_id'] = $feed_id;
3075
3076                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3077
3078                 if ($mark_as_read) {
3079                         $result = db_query("UPDATE ttrss_user_entries
3080                                 SET unread = false,last_read = NOW()
3081                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3082
3083                         ccache_update($feed_id, $owner_uid);
3084                 }
3085
3086                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,
3087                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3088                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3089                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3090                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3091                         num_comments,
3092                         tag_cache,
3093                         author,
3094                         orig_feed_id,
3095                         note,
3096                         cached_content
3097                         FROM ttrss_entries,ttrss_user_entries
3098                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3099
3100                 if ($result) {
3101
3102                         $line = db_fetch_assoc($result);
3103
3104                         $tag_cache = $line["tag_cache"];
3105
3106                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3107                         unset($line["tag_cache"]);
3108
3109                         $line["content"] = sanitize($line["content"], false, $owner_uid,        $line["site_url"]);
3110
3111                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3112                                 $line = $p->hook_render_article($line);
3113                         }
3114
3115                         $num_comments = $line["num_comments"];
3116                         $entry_comments = "";
3117
3118                         if ($num_comments > 0) {
3119                                 if ($line["comments"]) {
3120                                         $comments_url = htmlspecialchars($line["comments"]);
3121                                 } else {
3122                                         $comments_url = htmlspecialchars($line["link"]);
3123                                 }
3124                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3125                         } else {
3126                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3127                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3128                                 }
3129                         }
3130
3131                         if ($zoom_mode) {
3132                                 header("Content-Type: text/html");
3133                                 $rv['content'] .= "<html><head>
3134                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3135                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3136                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3137                                         </head><body id=\"ttrssZoom\">";
3138                         }
3139
3140                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3141
3142                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3143
3144                         $entry_author = $line["author"];
3145
3146                         if ($entry_author) {
3147                                 $entry_author = __(" - ") . $entry_author;
3148                         }
3149
3150                         $parsed_updated = make_local_datetime($line["updated"], true,
3151                                 $owner_uid, true);
3152
3153                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3154
3155                         if ($line["link"]) {
3156                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3157                                         title=\"".htmlspecialchars($line['title'])."\"
3158                                         href=\"" .
3159                                         htmlspecialchars($line["link"]) . "\">" .
3160                                         $line["title"] . "</a>" .
3161                                         "<span class='author'>$entry_author</span></div>";
3162                         } else {
3163                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3164                         }
3165
3166                         $tags_str = format_tags_string($line["tags"], $id);
3167                         $tags_str_full = join(", ", $line["tags"]);
3168
3169                         if (!$tags_str_full) $tags_str_full = __("no tags");
3170
3171                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3172
3173                         $rv['content'] .= "<div class='postTags' style='float : right'>
3174                                 <img src='images/tag.png'
3175                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3176
3177                         if (!$zoom_mode) {
3178                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3179                                         <a title=\"".__('Edit tags for this article')."\"
3180                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3181
3182                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3183                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3184                                         position=\"below\">$tags_str_full</div>";
3185
3186                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3187                                         $rv['content'] .= $p->hook_article_button($line);
3188                                 }
3189
3190                         } else {
3191                                 $tags_str = strip_tags($tags_str);
3192                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3193                         }
3194                         $rv['content'] .= "</div>";
3195                         $rv['content'] .= "<div clear='both'>";
3196
3197                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3198                                 $rv['content'] .= $p->hook_article_left_button($line);
3199                         }
3200
3201                         $rv['content'] .= "$entry_comments</div>";
3202
3203                         if ($line["orig_feed_id"]) {
3204
3205                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3206                                         WHERE id = ".$line["orig_feed_id"]);
3207
3208                                 if (db_num_rows($tmp_result) != 0) {
3209
3210                                         $rv['content'] .= "<div clear='both'>";
3211                                         $rv['content'] .= __("Originally from:");
3212
3213                                         $rv['content'] .= "&nbsp;";
3214
3215                                         $tmp_line = db_fetch_assoc($tmp_result);
3216
3217                                         $rv['content'] .= "<a target='_blank'
3218                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3219                                                 $tmp_line['title'] . "</a>";
3220
3221                                         $rv['content'] .= "&nbsp;";
3222
3223                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3224                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3225
3226                                         $rv['content'] .= "</div>";
3227                                 }
3228                         }
3229
3230                         $rv['content'] .= "</div>";
3231
3232                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3233                                 if ($line['note']) {
3234                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3235                                 }
3236                         $rv['content'] .= "</div>";
3237
3238                         $rv['content'] .= "<div class=\"postContent\">";
3239
3240                         $rv['content'] .= $line["content"];
3241                         $rv['content'] .= format_article_enclosures($id,
3242                                 sql_bool_to_bool($line["always_display_enclosures"]),
3243                                 $line["content"],
3244                                 sql_bool_to_bool($line["hide_images"]));
3245
3246                         $rv['content'] .= "</div>";
3247
3248                         $rv['content'] .= "</div>";
3249
3250                 }
3251
3252                 if ($zoom_mode) {
3253                         $rv['content'] .= "
3254                                 <div class='footer'>
3255                                 <button onclick=\"return window.close()\">".
3256                                         __("Close this window")."</button></div>";
3257                         $rv['content'] .= "</body></html>";
3258                 }
3259
3260                 return $rv;
3261
3262         }
3263
3264         function print_checkpoint($n, $s) {
3265                 $ts = microtime(true);
3266                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3267                 return $ts;
3268         }
3269
3270         function sanitize_tag($tag) {
3271                 $tag = trim($tag);
3272
3273                 $tag = mb_strtolower($tag, 'utf-8');
3274
3275                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3276
3277 //              $tag = str_replace('"', "", $tag);
3278 //              $tag = str_replace("+", " ", $tag);
3279                 $tag = str_replace("technorati tag: ", "", $tag);
3280
3281                 return $tag;
3282         }
3283
3284         function get_self_url_prefix() {
3285                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3286                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3287                 } else {
3288                         return SELF_URL_PATH;
3289                 }
3290         }
3291
3292         /**
3293          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3294          *
3295          * @return string The Mozilla Firefox feed adding URL.
3296          */
3297         function add_feed_url() {
3298                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3299
3300                 $url_path = get_self_url_prefix() .
3301                         "/public.php?op=subscribe&feed_url=%s";
3302                 return $url_path;
3303         } // function add_feed_url
3304
3305         function encrypt_password($pass, $salt = '', $mode2 = false) {
3306                 if ($salt && $mode2) {
3307                         return "MODE2:" . hash('sha256', $salt . $pass);
3308                 } else if ($salt) {
3309                         return "SHA1X:" . sha1("$salt:$pass");
3310                 } else {
3311                         return "SHA1:" . sha1($pass);
3312                 }
3313         } // function encrypt_password
3314
3315         function load_filters($feed_id, $owner_uid, $action_id = false) {
3316                 $filters = array();
3317
3318                 $cat_id = (int)getFeedCategory($feed_id);
3319
3320                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3321                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3322
3323                 $check_cats = join(",", array_merge(
3324                         getParentCategories($cat_id, $owner_uid),
3325                         array($cat_id)));
3326
3327                 while ($line = db_fetch_assoc($result)) {
3328                         $filter_id = $line["id"];
3329
3330                         $result2 = db_query("SELECT
3331                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3332                                 FROM ttrss_filters2_rules AS r,
3333                                 ttrss_filter_types AS t
3334                                 WHERE
3335                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3336                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3337                                         filter_type = t.id AND filter_id = '$filter_id'");
3338
3339                         $rules = array();
3340                         $actions = array();
3341
3342                         while ($rule_line = db_fetch_assoc($result2)) {
3343 #                               print_r($rule_line);
3344
3345                                 $rule = array();
3346                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3347                                 $rule["type"] = $rule_line["type_name"];
3348                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3349
3350                                 array_push($rules, $rule);
3351                         }
3352
3353                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3354                                 FROM ttrss_filters2_actions AS a,
3355                                 ttrss_filter_actions AS t
3356                                 WHERE
3357                                         action_id = t.id AND filter_id = '$filter_id'");
3358
3359                         while ($action_line = db_fetch_assoc($result2)) {
3360 #                               print_r($action_line);
3361
3362                                 $action = array();
3363                                 $action["type"] = $action_line["type_name"];
3364                                 $action["param"] = $action_line["action_param"];
3365
3366                                 array_push($actions, $action);
3367                         }
3368
3369
3370                         $filter = array();
3371                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3372                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3373                         $filter["rules"] = $rules;
3374                         $filter["actions"] = $actions;
3375
3376                         if (count($rules) > 0 && count($actions) > 0) {
3377                                 array_push($filters, $filter);
3378                         }
3379                 }
3380
3381                 return $filters;
3382         }
3383
3384         function get_score_pic($score) {
3385                 if ($score > 100) {
3386                         return "score_high.png";
3387                 } else if ($score > 0) {
3388                         return "score_half_high.png";
3389                 } else if ($score < -100) {
3390                         return "score_low.png";
3391                 } else if ($score < 0) {
3392                         return "score_half_low.png";
3393                 } else {
3394                         return "score_neutral.png";
3395                 }
3396         }
3397
3398         function feed_has_icon($id) {
3399                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3400         }
3401
3402         function init_plugins() {
3403                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3404
3405                 return true;
3406         }
3407
3408         function format_tags_string($tags, $id) {
3409                 if (!is_array($tags) || count($tags) == 0) {
3410                         return __("no tags");
3411                 } else {
3412                         $maxtags = min(5, count($tags));
3413
3414                         for ($i = 0; $i < $maxtags; $i++) {
3415                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."'\")>" . $tags[$i] . "</a>, ";
3416                         }
3417
3418                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3419
3420                         if (count($tags) > $maxtags)
3421                                 $tags_str .= ", &hellip;";
3422
3423                         return $tags_str;
3424                 }
3425         }
3426
3427         function format_article_labels($labels, $id) {
3428
3429                 if (!is_array($labels)) return '';
3430
3431                 $labels_str = "";
3432
3433                 foreach ($labels as $l) {
3434                         $labels_str .= sprintf("<span class='hlLabelRef'
3435                                 style='color : %s; background-color : %s'>%s</span>",
3436                                         $l[2], $l[3], $l[1]);
3437                         }
3438
3439                 return $labels_str;
3440
3441         }
3442
3443         function format_article_note($id, $note, $allow_edit = true) {
3444
3445                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3446                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3447                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3448
3449                 return $str;
3450         }
3451
3452
3453         function get_feed_category($feed_cat, $parent_cat_id = false) {
3454                 if ($parent_cat_id) {
3455                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3456                         $parent_insert = "'$parent_cat_id'";
3457                 } else {
3458                         $parent_qpart = "parent_cat IS NULL";
3459                         $parent_insert = "NULL";
3460                 }
3461
3462                 $result = db_query(
3463                         "SELECT id FROM ttrss_feed_categories
3464                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3465
3466                 if (db_num_rows($result) == 0) {
3467                         return false;
3468                 } else {
3469                         return db_fetch_result($result, 0, "id");
3470                 }
3471         }
3472
3473         function add_feed_category($feed_cat, $parent_cat_id = false) {
3474
3475                 if (!$feed_cat) return false;
3476
3477                 db_query("BEGIN");
3478
3479                 if ($parent_cat_id) {
3480                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3481                         $parent_insert = "'$parent_cat_id'";
3482                 } else {
3483                         $parent_qpart = "parent_cat IS NULL";
3484                         $parent_insert = "NULL";
3485                 }
3486
3487                 $feed_cat = mb_substr($feed_cat, 0, 250);
3488
3489                 $result = db_query(
3490                         "SELECT id FROM ttrss_feed_categories
3491                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3492
3493                 if (db_num_rows($result) == 0) {
3494
3495                         $result = db_query(
3496                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3497                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3498
3499                         db_query("COMMIT");
3500
3501                         return true;
3502                 }
3503
3504                 return false;
3505         }
3506
3507         function getArticleFeed($id) {
3508                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3509                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3510
3511                 if (db_num_rows($result) != 0) {
3512                         return db_fetch_result($result, 0, "feed_id");
3513                 } else {
3514                         return 0;
3515                 }
3516         }
3517
3518         /**
3519          * Fixes incomplete URLs by prepending "http://".
3520          * Also replaces feed:// with http://, and
3521          * prepends a trailing slash if the url is a domain name only.
3522          *
3523          * @param string $url Possibly incomplete URL
3524          *
3525          * @return string Fixed URL.
3526          */
3527         function fix_url($url) {
3528                 if (strpos($url, '://') === false) {
3529                         $url = 'http://' . $url;
3530                 } else if (substr($url, 0, 5) == 'feed:') {
3531                         $url = 'http:' . substr($url, 5);
3532                 }
3533
3534                 //prepend slash if the URL has no slash in it
3535                 // "http://www.example" -> "http://www.example/"
3536                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3537                         $url .= '/';
3538                 }
3539
3540                 if ($url != "http:///")
3541                         return $url;
3542                 else
3543                         return '';
3544         }
3545
3546         function validate_feed_url($url) {
3547                 $parts = parse_url($url);
3548
3549                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3550
3551         }
3552
3553         function get_article_enclosures($id) {
3554
3555                 $query = "SELECT * FROM ttrss_enclosures
3556                         WHERE post_id = '$id' AND content_url != ''";
3557
3558                 $rv = array();
3559
3560                 $result = db_query($query);
3561
3562                 if (db_num_rows($result) > 0) {
3563                         while ($line = db_fetch_assoc($result)) {
3564                                 array_push($rv, $line);
3565                         }
3566                 }
3567
3568                 return $rv;
3569         }
3570
3571         function save_email_address($email) {
3572                 // FIXME: implement persistent storage of emails
3573
3574                 if (!$_SESSION['stored_emails'])
3575                         $_SESSION['stored_emails'] = array();
3576
3577                 if (!in_array($email, $_SESSION['stored_emails']))
3578                         array_push($_SESSION['stored_emails'], $email);
3579         }
3580
3581
3582         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3583
3584                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3585
3586                 $sql_is_cat = bool_to_sql_bool($is_cat);
3587
3588                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3589                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3590                         AND owner_uid = " . $owner_uid);
3591
3592                 if (db_num_rows($result) == 1) {
3593                         return db_fetch_result($result, 0, "access_key");
3594                 } else {
3595                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3596
3597                         $result = db_query("INSERT INTO ttrss_access_keys
3598                                 (access_key, feed_id, is_cat, owner_uid)
3599                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3600
3601                         return $key;
3602                 }
3603                 return false;
3604         }
3605
3606         function get_feeds_from_html($url, $content)
3607         {
3608                 $url     = fix_url($url);
3609                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3610
3611                 libxml_use_internal_errors(true);
3612
3613                 $doc = new DOMDocument();
3614                 $doc->loadHTML($content);
3615                 $xpath = new DOMXPath($doc);
3616                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3617                 $feedUrls = array();
3618                 foreach ($entries as $entry) {
3619                         if ($entry->hasAttribute('href')) {
3620                                 $title = $entry->getAttribute('title');
3621                                 if ($title == '') {
3622                                         $title = $entry->getAttribute('type');
3623                                 }
3624                                 $feedUrl = rewrite_relative_url(
3625                                         $baseUrl, $entry->getAttribute('href')
3626                                 );
3627                                 $feedUrls[$feedUrl] = $title;
3628                         }
3629                 }
3630                 return $feedUrls;
3631         }
3632
3633         function is_html($content) {
3634                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3635         }
3636
3637         function url_is_html($url, $login = false, $pass = false) {
3638                 return is_html(fetch_file_contents($url, false, $login, $pass));
3639         }
3640
3641         function print_label_select($name, $value, $attributes = "") {
3642
3643                 $result = db_query("SELECT caption FROM ttrss_labels2
3644                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3645
3646                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3647                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3648
3649                 while ($line = db_fetch_assoc($result)) {
3650
3651                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3652
3653                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3654                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3655
3656                 }
3657
3658 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3659
3660                 print "</select>";
3661
3662
3663         }
3664
3665         function format_article_enclosures($id, $always_display_enclosures,
3666                                         $article_content, $hide_images = false) {
3667
3668                 $result = get_article_enclosures($id);
3669                 $rv = '';
3670
3671                 if (count($result) > 0) {
3672
3673                         $entries_html = array();
3674                         $entries = array();
3675                         $entries_inline = array();
3676
3677                         foreach ($result as $line) {
3678
3679                                 $url = $line["content_url"];
3680                                 $ctype = $line["content_type"];
3681
3682                                 if (!$ctype) $ctype = __("unknown type");
3683
3684                                 $filename = substr($url, strrpos($url, "/")+1);
3685
3686                                 $player = format_inline_player($url, $ctype);
3687
3688                                 if ($player) array_push($entries_inline, $player);
3689
3690 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3691 #                                       $filename . " (" . $ctype . ")" . "</a>";
3692
3693                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3694                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3695
3696                                 array_push($entries_html, $entry);
3697
3698                                 $entry = array();
3699
3700                                 $entry["type"] = $ctype;
3701                                 $entry["filename"] = $filename;
3702                                 $entry["url"] = $url;
3703
3704                                 array_push($entries, $entry);
3705                         }
3706
3707                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3708                                 if ($always_display_enclosures ||
3709                                                         !preg_match("/<img/i", $article_content)) {
3710
3711                                         foreach ($entries as $entry) {
3712
3713                                                 if (preg_match("/image/", $entry["type"]) ||
3714                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3715
3716                                                                 if (!$hide_images) {
3717                                                                         $rv .= "<p><img
3718                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3719                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3720                                                                 } else {
3721                                                                         $rv .= "<p><a target=\"_blank\"
3722                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3723                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3724
3725                                                                 }
3726                                                 }
3727                                         }
3728                                 }
3729                         }
3730
3731                         if (count($entries_inline) > 0) {
3732                                 $rv .= "<hr clear='both'/>";
3733                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3734                                 $rv .= "<hr clear='both'/>";
3735                         }
3736
3737                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3738                                 "<option value=''>" . __('Attachments')."</option>";
3739
3740                         foreach ($entries as $entry) {
3741                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3742
3743                         };
3744
3745                         $rv .= "</select>";
3746                 }
3747
3748                 return $rv;
3749         }
3750
3751         function getLastArticleId() {
3752                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3753                         WHERE owner_uid = " . $_SESSION["uid"]);
3754
3755                 if (db_num_rows($result) == 1) {
3756                         return db_fetch_result($result, 0, "id");
3757                 } else {
3758                         return -1;
3759                 }
3760         }
3761
3762         function build_url($parts) {
3763                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3764         }
3765
3766         /**
3767          * Converts a (possibly) relative URL to a absolute one.
3768          *
3769          * @param string $url     Base URL (i.e. from where the document is)
3770          * @param string $rel_url Possibly relative URL in the document
3771          *
3772          * @return string Absolute URL
3773          */
3774         function rewrite_relative_url($url, $rel_url) {
3775                 if (strpos($rel_url, "magnet:") === 0) {
3776                         return $rel_url;
3777                 } else if (strpos($rel_url, "://") !== false) {
3778                         return $rel_url;
3779                 } else if (strpos($rel_url, "//") === 0) {
3780                         # protocol-relative URL (rare but they exist)
3781                         return $rel_url;
3782                 } else if (strpos($rel_url, "/") === 0)
3783                 {
3784                         $parts = parse_url($url);
3785                         $parts['path'] = $rel_url;
3786
3787                         return build_url($parts);
3788
3789                 } else {
3790                         $parts = parse_url($url);
3791                         if (!isset($parts['path'])) {
3792                                 $parts['path'] = '/';
3793                         }
3794                         $dir = $parts['path'];
3795                         if (substr($dir, -1) !== '/') {
3796                                 $dir = dirname($parts['path']);
3797                                 $dir !== '/' && $dir .= '/';
3798                         }
3799                         $parts['path'] = $dir . $rel_url;
3800
3801                         return build_url($parts);
3802                 }
3803         }
3804
3805         function sphinx_search($query, $offset = 0, $limit = 30) {
3806                 require_once 'lib/sphinxapi.php';
3807
3808                 $sphinxClient = new SphinxClient();
3809
3810                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3811
3812                 $sphinxClient->SetServer($sphinxpair[0], $sphinxpair[1]);
3813                 $sphinxClient->SetConnectTimeout(1);
3814
3815                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3816                         'feed_title' => 20));
3817
3818                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3819                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3820                 $sphinxClient->SetLimits($offset, $limit, 1000);
3821                 $sphinxClient->SetArrayResult(false);
3822                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3823
3824                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3825
3826                 $ids = array();
3827
3828                 if (is_array($result['matches'])) {
3829                         foreach (array_keys($result['matches']) as $int_id) {
3830                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3831                                 array_push($ids, $ref_id);
3832                         }
3833                 }
3834
3835                 return $ids;
3836         }
3837
3838         function cleanup_tags($days = 14, $limit = 1000) {
3839
3840                 if (DB_TYPE == "pgsql") {
3841                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3842                 } else if (DB_TYPE == "mysql") {
3843                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3844                 }
3845
3846                 $tags_deleted = 0;
3847
3848                 while ($limit > 0) {
3849                         $limit_part = 500;
3850
3851                         $query = "SELECT ttrss_tags.id AS id
3852                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3853                                 WHERE post_int_id = int_id AND $interval_query AND
3854                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3855
3856                         $result = db_query($query);
3857
3858                         $ids = array();
3859
3860                         while ($line = db_fetch_assoc($result)) {
3861                                 array_push($ids, $line['id']);
3862                         }
3863
3864                         if (count($ids) > 0) {
3865                                 $ids = join(",", $ids);
3866
3867                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3868                                 $tags_deleted += db_affected_rows($tmp_result);
3869                         } else {
3870                                 break;
3871                         }
3872
3873                         $limit -= $limit_part;
3874                 }
3875
3876                 return $tags_deleted;
3877         }
3878
3879         function print_user_stylesheet() {
3880                 $value = get_pref('USER_STYLESHEET');
3881
3882                 if ($value) {
3883                         print "<style type=\"text/css\">";
3884                         print str_replace("<br/>", "\n", $value);
3885                         print "</style>";
3886                 }
3887
3888         }
3889
3890         function rewrite_urls($html) {
3891                 libxml_use_internal_errors(true);
3892
3893                 $charset_hack = '<head>
3894                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3895                 </head>';
3896
3897                 $doc = new DOMDocument();
3898                 $doc->loadHTML($charset_hack . $html);
3899                 $xpath = new DOMXPath($doc);
3900
3901                 $entries = $xpath->query('//*/text()');
3902
3903                 foreach ($entries as $entry) {
3904                         if (strstr($entry->wholeText, "://") !== false) {
3905                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3906                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3907
3908                                 if ($text != $entry->wholeText) {
3909                                         $cdoc = new DOMDocument();
3910                                         $cdoc->loadHTML($charset_hack . $text);
3911
3912
3913                                         foreach ($cdoc->childNodes as $cnode) {
3914                                                 $cnode = $doc->importNode($cnode, true);
3915
3916                                                 if ($cnode) {
3917                                                         $entry->parentNode->insertBefore($cnode);
3918                                                 }
3919                                         }
3920
3921                                         $entry->parentNode->removeChild($entry);
3922
3923                                 }
3924                         }
3925                 }
3926
3927                 $node = $doc->getElementsByTagName('body')->item(0);
3928
3929                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3930                 if ($node)
3931                         return $doc->saveXML($node);
3932                 else
3933                         return $html;
3934         }
3935
3936         function filter_to_sql($filter, $owner_uid) {
3937                 $query = array();
3938
3939                 if (DB_TYPE == "pgsql")
3940                         $reg_qpart = "~";
3941                 else
3942                         $reg_qpart = "REGEXP";
3943
3944                 foreach ($filter["rules"] AS $rule) {
3945                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3946                                 $rule['reg_exp']) !== FALSE;
3947
3948                         if ($regexp_valid) {
3949
3950                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3951
3952                                         switch ($rule["type"]) {
3953                                         case "title":
3954                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3955                                                         $rule['reg_exp'] . "')";
3956                                                 break;
3957                                         case "content":
3958                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3959                                                         $rule['reg_exp'] . "')";
3960                                                 break;
3961                                         case "both":
3962                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3963                                                         $rule['reg_exp'] . "') OR LOWER(" .
3964                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3965                                                 break;
3966                                         case "tag":
3967                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3968                                                         $rule['reg_exp'] . "')";
3969                                                 break;
3970                                         case "link":
3971                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3972                                                         $rule['reg_exp'] . "')";
3973                                                 break;
3974                                         case "author":
3975                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3976                                                         $rule['reg_exp'] . "')";
3977                                                 break;
3978                                 }
3979
3980                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3981
3982                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3983                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3984                                 }
3985
3986                                 if (isset($rule["cat_id"])) {
3987
3988                                         if ($rule["cat_id"] > 0) {
3989                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
3990                                                 array_push($children, $rule["cat_id"]);
3991
3992                                                 $children = join(",", $children);
3993
3994                                                 $cat_qpart = "cat_id IN ($children)";
3995                                         } else {
3996                                                 $cat_qpart = "cat_id IS NULL";
3997                                         }
3998
3999                                         $qpart .= " AND $cat_qpart";
4000                                 }
4001
4002                                 array_push($query, "($qpart)");
4003
4004                         }
4005                 }
4006
4007                 if (count($query) > 0) {
4008                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4009                 } else {
4010                         $fullquery = "(false)";
4011                 }
4012
4013                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4014
4015                 return $fullquery;
4016         }
4017
4018         if (!function_exists('gzdecode')) {
4019                 function gzdecode($string) { // no support for 2nd argument
4020                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4021                                 base64_encode($string));
4022                 }
4023         }
4024
4025         function get_random_bytes($length) {
4026                 if (function_exists('openssl_random_pseudo_bytes')) {
4027                         return openssl_random_pseudo_bytes($length);
4028                 } else {
4029                         $output = "";
4030
4031                         for ($i = 0; $i < $length; $i++)
4032                                 $output .= chr(mt_rand(0, 255));
4033
4034                         return $output;
4035                 }
4036         }
4037
4038         function read_stdin() {
4039                 $fp = fopen("php://stdin", "r");
4040
4041                 if ($fp) {
4042                         $line = trim(fgets($fp));
4043                         fclose($fp);
4044                         return $line;
4045                 }
4046
4047                 return null;
4048         }
4049
4050         function tmpdirname($path, $prefix) {
4051                 // Use PHP's tmpfile function to create a temporary
4052                 // directory name. Delete the file and keep the name.
4053                 $tempname = tempnam($path,$prefix);
4054                 if (!$tempname)
4055                         return false;
4056
4057                 if (!unlink($tempname))
4058                         return false;
4059
4060        return $tempname;
4061         }
4062
4063         function getFeedCategory($feed) {
4064                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4065                         WHERE id = '$feed'");
4066
4067                 if (db_num_rows($result) > 0) {
4068                         return db_fetch_result($result, 0, "cat_id");
4069                 } else {
4070                         return false;
4071                 }
4072
4073         }
4074
4075         function implements_interface($class, $interface) {
4076                 return in_array($interface, class_implements($class));
4077         }
4078
4079         function geturl($url){
4080
4081                 if (!function_exists('curl_init'))
4082                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4083
4084                 $curl = curl_init();
4085                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4086                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4087                 $header[] = "Cache-Control: max-age=0";
4088                 $header[] = "Connection: keep-alive";
4089                 $header[] = "Keep-Alive: 300";
4090                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4091                 $header[] = "Accept-Language: en-us,en;q=0.5";
4092                 $header[] = "Pragma: ";
4093
4094                 curl_setopt($curl, CURLOPT_URL, $url);
4095                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4096                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4097                 curl_setopt($curl, CURLOPT_HEADER, true);
4098                 curl_setopt($curl, CURLOPT_REFERER, $url);
4099                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4100                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4101                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4102                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4103                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4104                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4105
4106                 $html = curl_exec($curl);
4107
4108                 $status = curl_getinfo($curl);
4109
4110                 if($status['http_code']!=200){
4111                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4112                                 curl_close($curl);
4113                                 list($header) = explode("\r\n\r\n", $html, 2);
4114                                 $matches = array();
4115                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4116                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4117                                 $url_parsed = parse_url($url);
4118                                 return (isset($url_parsed))? geturl($url):'';
4119                         }
4120
4121                         global $fetch_last_error;
4122
4123                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4124                         curl_close($curl);
4125
4126                         $oline='';
4127                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4128                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4129 #                       $handle = @fopen('./curl.error.log', 'a');
4130 #                       fwrite($handle, $line);
4131                         return FALSE;
4132                 }
4133                 curl_close($curl);
4134                 return $url;
4135         }
4136
4137         function get_minified_js($files) {
4138                 require_once 'lib/jshrink/Minifier.php';
4139
4140                 $rv = '';
4141
4142                 foreach ($files as $js) {
4143                         if (!isset($_GET['debug'])) {
4144                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4145
4146                                 if (file_exists($cached_file) &&
4147                                                 is_readable($cached_file) &&
4148                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4149
4150                                         $rv .= file_get_contents($cached_file);
4151
4152                                 } else {
4153                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4154                                         file_put_contents($cached_file, $minified);
4155                                         $rv .= $minified;
4156                                 }
4157                         } else {
4158                                 $rv .= file_get_contents("js/$js.js");
4159                         }
4160                 }
4161
4162                 return $rv;
4163         }
4164
4165         function stylesheet_tag($filename) {
4166                 $timestamp = filemtime($filename);
4167
4168                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4169         }
4170
4171         function javascript_tag($filename) {
4172                 $query = "";
4173
4174                 if (!(strpos($filename, "?") === FALSE)) {
4175                         $query = substr($filename, strpos($filename, "?")+1);
4176                         $filename = substr($filename, 0, strpos($filename, "?"));
4177                 }
4178
4179                 $timestamp = filemtime($filename);
4180
4181                 if ($query) $timestamp .= "&$query";
4182
4183                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4184         }
4185
4186         function calculate_dep_timestamp() {
4187                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4188
4189                 $max_ts = -1;
4190
4191                 foreach ($files as $file) {
4192                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4193                 }
4194
4195                 return $max_ts;
4196         }
4197
4198         function T_js_decl($s1, $s2) {
4199                 if ($s1 && $s2) {
4200                         $s1 = preg_replace("/\n/", "", $s1);
4201                         $s2 = preg_replace("/\n/", "", $s2);
4202
4203                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4204                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4205
4206                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4207                 }
4208         }
4209
4210         function init_js_translations() {
4211
4212         print 'var T_messages = new Object();
4213
4214                 function __(msg) {
4215                         if (T_messages[msg]) {
4216                                 return T_messages[msg];
4217                         } else {
4218                                 return msg;
4219                         }
4220                 }
4221
4222                 function ngettext(msg1, msg2, n) {
4223                         return (parseInt(n) > 1) ? msg2 : msg1;
4224                 }';
4225
4226                 $l10n = _get_reader();
4227
4228                 for ($i = 0; $i < $l10n->total; $i++) {
4229                         $orig = $l10n->get_original_string($i);
4230                         $translation = __($orig);
4231
4232                         print T_js_decl($orig, $translation);
4233                 }
4234         }
4235
4236         function label_to_feed_id($label) {
4237                 return LABEL_BASE_INDEX - 1 - abs($label);
4238         }
4239
4240         function feed_to_label_id($feed) {
4241                 return LABEL_BASE_INDEX - 1 + abs($feed);
4242         }
4243
4244         function format_libxml_error($error) {
4245                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4246                                 $error->code, $error->line, $error->column,
4247                                 $error->message);
4248         }
4249
4250 ?>